reference-design-contract

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md defines a required workflow that “reads evidence” from “provided screenshots, URLs, existing DESIGN.md, brand docs, image artifacts, or user notes,” meaning attacker-supplied free text (e.g., user notes and referenced URLs’ contents) can be ingested at runtime for contract writing.