platform-widget-generate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md Step 1–2, the widget skill infers the widget spec directly from the user’s prompt when no lightningTypeSchema is provided, and then uses that derived spec (a list of field names/types) to call metadata actions (discoverUiComponents, getUiComponentSchemas) that guide subsequent code generation.