content-factory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Within the required runtime workflow (“Act as the … agent” and pipeline steps) the outsider can paste free-text into the skill as the “Topic/Research/Brain Dump” or “Source content” (e.g., “Run the content factory on this article: [paste or link]”), which is then directly ingested by the Writer/Remixer for drafting and remixing.