brainstorm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). At runtime the skill reads docs/content/docs/reference/roadmap/<slug>.mdx (an existing roadmap item’s text authored by someone other than the operator), and that freeform prose is loaded into the agent’s LLM context as “Load context.”