start-execution-model

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s mandatory workflow only points to verifying against trusted internal references (Context7/external Exa) before writing code, but it does not specify that the agent reads any outsider-authored free text from a user-controllable feed/queue/inbox at runtime.