flowr-usage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s resolver script reads the target repository’s free-form pubspec.yaml and optional config.yaml/profile text (e.g., profile_text and config_text) and then concatenates that text into the resolved instructions delivered to the agent.