replicate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow calls Replicate’s HTTP API to create/poll predictions and then ingests the prediction output (including text token strings or error details) into the agent context, which is outsider-authored free text produced by Replicate’s hosted models rather than the operating user.