html-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to “Review the files throughout references/html-effectiveness/” and then create an HTML plan, so the runtime LLM context will include outsider-authored free text from those referenced repository files (e.g., the included HTML example pages and markdown docs) rather than only user-authored content.