api-design-reviewer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill runtime path reads a user-provided OpenAPI/raw JSON file at scripts/api_linter.py/api_scorecard.py/breaking_change_detector.py via open(args.input_file/spec_file) and json.load(...), so outsider-authored text can be supplied directly as input.