pm-onboarding

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). This skill’s runtime workflow instructs the user to “read top 50 support tickets,” “listen to sales/support/customer success calls,” and otherwise ingest customer/public/support text; that customer-support content is outsider-authored free-form text that can flow into the agent/LLM context via the user’s pasted notes or excerpts.