epd-to-spec

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's workflow in SKILL.md explicitly instructs the agent to "extract the GWP values and declared units" from user-provided EPD sheets or comparison reports and offers the option to "use /epd-research — I'll find EPDs for your material categories," which requires fetching and interpreting third-party EPDs (external/public documents) that directly determine GWP thresholds and therefore influence spec decisions.