dx-pkg-post-install-configure

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md: Phase 4 (“Read and Parse Post-Install Document”) ingests user-supplied post-install documentation (PDF/markdown/URL/pasted text) into the agent’s LLM context, which can be outsider-authored free text if the doc comes from outside the operating user’s workspace.