woo-blocks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md "Before writing code" step explicitly tells the agent to web-search and fetch live docs from public sites (e.g., developer.woocommerce.com and https://developer.wordpress.org/block-editor/), so the agent will ingest and act on open, third-party web content that can materially influence subsequent implementation decisions.