ext-outline-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow performs a runtime marketplace inventory scan (public/community bundle content) and then reads the resulting inventory file to obtain component file paths, which can lead to outsider-authored free text (e.g., other publishers’ SKILL.md/agent/command/test bodies) being ingested into the LLM context during subsequent per-file analysis.