respira-setup-assistant

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly calls respira_get_server_compatibility and respira_get_site_context to fetch data (plugin lists, site URL, versions, API-key flags) from the user's WordPress site and then uses those responses to decide branches and follow-up actions, meaning untrusted site-provided content is ingested at runtime and can materially influence agent behavior.