medusa-orders

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md’s “Fetch live docs” steps instruct runtime web-search and fetching public Medusa documentation pages/URLs (e.g., https://docs.medusajs.com/...), which are outsider-authored free text that could be ingested into the agent’s LLM context if the agent actually reads/summarizes them at runtime.