writing-shape

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). [writing-shape] reads only user-provided markdown “raw material” from the skill’s required workflow (“将原始素材…从头读到尾”，并在“从材料堆中提取”中逐段改写/引用），so outsider-authored free text is directly ingested at runtime.