skf-campaign

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). At runtime, skf-campaign loads operator/outsider-supplied free text from campaign.directive_path by reading _campaign-directive.md from the filesystem (if set) and injects its raw directive_content into each per-skill kickoff context via references/step-05-skill-loop.md → scripts/campaign-render-kickoff.py.