justhold-mdx-content

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md describes loading MDX bodies from Cloudflare R2 for public pages via lib/posts.ts + lib/mdx/render, and those MDX bodies are authored by others (CMS content), so outsider-authored free text can be ingested into the LLM context through the runtime rendering pipeline.