writing-beats

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow only ingests a user-provided markdown “raw material” file (“read… a markdown file of raw material”), which is outsider-authored free text passed into the repository-facing process, so the LLM ingests untrusted text at runtime via the provided file content.