zepp-os-communication

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill runtime allows the side service to fetch() arbitrary HTTP responses whose response.body is parsed/forwarded to the device as free text (or JSON), meaning outsider-authored content from the fetched URL is ingested at runtime via the onRequest→fetch→res path.