claims-gate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill reads brand learnings and files (such as brand records and local claims files) which contain text provided by users or clients, presenting an indirect prompt injection risk from external claim sources or pasted approvals.