convex-cron-jobs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill includes a runtime cron action (convex/sync.ts, syncExternalData) that fetches data from an external URL (fetch("https://api.example.com/data") and stores the JSON in the DB), and the SKILL.md also instructs fetching live documentation (https://docs.convex.dev/...), so third-party web/API content is ingested at runtime and can materially influence cron-driven behavior.