pyqgis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly shows loading external/untrusted data sources (e.g., WMS/WFS URIs like "url=https://example.com/wms" under "数据提供者", GeoJSON via QgsJsonUtils.stringToFeatureList(geojson_string), and CSV/remote layer URIs) which the agent would ingest and then use in processing.run() calls and expression-based logic, so third-party content can materially influence actions.