legal-tos-privacy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill ingests outsider-authored free text only indirectly via user-provided answers in Phase 7 (“ask the user for missing values… in a single request”), and does not describe reading from arbitrary external submission sources at runtime.