changelog-video

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The only runtime text ingestion path into the agent/LLM is user-provided changelog .md content (SKILL.md:3), while the rest (registry/script/lexicon/build spec) are bundled references and no web/runtime fetching of outsider free text into the LLM context is described.