devtu-auto-discover-apis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's required discovery workflow (Phase 1, Step 1.3 "Web Search for Gap APIs" and earlier "scrape API documentation for endpoints and schemas") explicitly instructs the agent to search, fetch, and scrape public third-party API documentation and forum/GitHub examples and to use that content to generate tool code and test inputs, so untrusted external content can directly influence tool creation and subsequent actions.