megaview-openapi

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's runtime scripts (e.g., scripts/conversation_training_samples.py and scripts/employee_performance.py) explicitly call Megaview APIs (open.megaview.com endpoints) and even download ASR transcripts from arbitrary asr_file_url values returned by the API, ingesting user-generated conversation transcripts and summaries which the agent reads and uses to select coaching samples and influence performance-review decisions.