ai-industrial-brutalist-ui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Required workflow allows user-supplied materialUrl (public page) and/or materialText/uploaded files to be ingested into the skill’s context via the form schema’s contextComposer (fields materialUrl, materialText, materialFile), so if the URL/page or pasted text is outsider-authored free text, it can reach the LLM as readable content.