knowledge-update

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md’s required workflow reads outsider-authored free text from the bound wiki and/or an externally provided --source (URL/file) at runtime (“Read the current page and the source”: read full page text and, for new-source, read the new source fully), which then gets surfaced in plain-prose diff context for the LLM to use.