donor-proposal-scoring

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow in SKILL.md ingests outsider-authored free text directly from user-supplied proposal and call documents stored in local folders (e.g., /proposal scoring and reading the “call document award-criteria section” and the proposal content) without any step that restricts sources to trusted first-party text.