churn-prevention

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The only outsider-authored free text is the optional "Other" text field in the customer exit survey (SKILL.md:101), which the agent reads only when running the "Optimize an existing flow" mode to analyze cancel data (SKILL.md:58), so it is not forced delivery.