medusa-customers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). SKILL.md's "Before writing code" steps explicitly instruct the agent to web-search docs.medusajs.com and to fetch https://docs.medusajs.com/resources/references/customer (public Medusa docs), which are untrusted third-party pages the agent is expected to read and use to determine service method signatures and auth flows that can materially change implementation decisions.