chain-method

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source input is the outsider-authored free text list supplied directly by the user in the /chain-method command arguments (or --topic generated practice list) which the skill then normalizes and uses to generate the chain at runtime, so the workflow ingests arbitrary user text without selecting a trusted item first.