canvas-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime consumes the user’s own free-text request/instructions as the “subtle input or instructions by the user” that then guides both the philosophy (.md) and canvas generation (PDF/PNG), so outsider-authored text is directly ingested without requiring prior selection of a specific item.