pia-generation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill’s runtime workflow ingests outsider-authored free text from the user-provided PRD “Drive link” (public/externally authored document content fetched at runtime) and from prior outputs/triage files only if they were created by others; the PRD path is the primary injection vector because it is free-form document text supplied outside the operating user’s authorship.