rank-tracker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md defines a “zero-dependency measurement loop” that ingests user-provided ranking snapshots and optional tool exports at runtime (the agent reads “any user-provided or tool metrics” and processes ledger.py record/diff/trend data), which are outsider-authored free text when the user supplies them.