wiki-llms-txt

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow generates llms-full.txt by inlining “Full markdown content” from existing wiki pages (i.e., it reads wiki page body text authored outside the skill), which is then fed into the agent’s LLM context as readable prose inside the generated <doc> blocks.