saleor-customers

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to "Fetch live docs" via web-search and to fetch the public URL https://docs.saleor.io/docs/developer/users (and other docs.saleor.io pages), meaning the agent will ingest and act on third-party public website content to determine mutations, permissions, and token handling.