pre-impl-discussion

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required Procedure step 2 ("Research Thoroughly") explicitly instructs consulting public sources such as docs, changelogs, migration guides and GitHub issues—i.e., open web and user-generated content—which the agent is expected to read and use as evidence to influence decisions and next actions.