plakatstil-object-poster

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md “Input” and “Workflow → 编译提示词”, the required runtime ingests outsider-authored free text directly from the user (e.g., “文字主题…可选的一行小副标题…直接粘贴文章内容”) and compiles it into the final prompt without needing the agent to select a specific pre-approved item first.