plan-pipeline-ceo-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill defines a CEO review prompt workflow that ingests the user’s request text directly from chat input (the literal “feature request”) and has the model restate/challenge it, so outsider-authored free text is read without needing a prior selection of a specific item.