early-access-designer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). This skill’s runtime path reads user-provided launch context and exported metrics (untrusted free-text fields like product/current stage/audience/goal and pasted exports) in the “Reads” section, and processes them in steps 1–4 of the Instructions without first selecting a specific pre-authored item.