database-designer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime ingests outsider-authored free text via user-supplied input files (e.g., --schema and --queries JSON/DDL) that are loaded and parsed at runtime, so an attacker can supply crafted “schema”/“query patterns” content without any prior item selection.