daily-focus-board

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). [The skill’s runtime uses user-supplied task text from the conversation to populate window.__BOARD__ (as JSON) and the HTML/JS then renders/saves that text in the browser (e.g., task titles, subnotes, mantra, and later recap), so outsider-authored free text is directly ingested at runtime.]