cyrano

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s required runtime workflow reads organizer-authored calendar event payloads via the host calendar tool in “A 캘린더 모드” (targets selection), where external attendees are taken from event attendees fields without further user/operator selection of a specific text item, creating an indirect prompt-injection surface if a user can submit/poison calendar event text that gets ingested.