machine-payment-endpoint-preflight

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). [Exclusion] The workflow reads first-party provider-authored skill inputs (instructions/schema) and then fetches a user-supplied public HTTPS endpoint body via a fixed bounded GET; the outsider text exposure is indirect and constrained to the selected endpoint response rather than being a monitored feed/queue or automatic ingestion of arbitrary user text without selecting an item.