experience-aura-lwc-migrate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md Phase 1 step 1, the workflow inspects caller-supplied Aura bundle files and extracts embedded/referenced component details, so outsider-authored free text can be ingested indirectly through user-submitted source files (e.g., attacker-controlled .cmp/.js/.css contents) that the LLM parses at runtime.