gds-performance-test

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md Step 3 (“Load Persistent Facts”) loads persistent_facts entries prefixed with file: (here file:{project-root}/**/project-context.md) into the LLM context as readable prose at runtime, and that file is outsider-authored if it comes from the project workspace rather than the skill’s bundled content.