reactivation-specialist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md states the skill reads the user’s pasted suppression policy, lapsed-cohort criteria, and (optionally) an ESP “engagement/flow export” plus GA4/analytics returns, all of which are treated as untrusted input and thus are outsider-authored free text whenever a provider user supplies the exports/lists at runtime.