sf-b2c-cartridges

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to "Fetch live documentation FIRST" by web-searching and web-fetching public sources (e.g., the SFRA GitHub repo, Salesforce B2C Commerce documentation, and the LINK marketplace guidelines), which the agent is expected to read and use to determine code structure and deployment decisions, allowing untrusted third-party content to influence actions.