theming

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to call Vaadin MCP tools (search_vaadin_docs, get_component_styling, get_component_java_api) to look up the latest Vaadin documentation (public Vaadin docs / referenced GitHub pages) as part of its required workflow, so the agent will fetch and interpret open/public third‑party content that can influence actions.