prioritize-reference-files

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). This skill’s required workflow reads user-provided reference files from the task context (including possible outsider-authored attachments like PDFs/DOCs) via read_file(...) and, on .docx fallback, via unzip ... word/document.xml/shell_agent—so arbitrary free text from non-user sources can be ingested into the LLM context.