narrative-drift-monitor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the runtime path “Snapshot each watched surface” uses scripts/connectors/wayback.py to capture “current wording” and pull change history for live brand surfaces that are “User-provided or scraped,” meaning outsider-authored free text can be ingested from user-controlled page/deck/listing content without first selecting a specific item.