analyze-chart

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the required runtime workflow reads Amplitude chart data after the user supplies a chart URL/ID (via “Amplitude:get_from_url” and “Reading chart data”), so outsider-authored free text can enter at least through the user-provided chart URL/ID and associated chart content the LLM retrieves.