content-assembly-line

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly accepts and transcribes external URLs (e.g., "Loom/Video URL" in the Input Types and the /content:assembly "url" quick command) and requires the agent to read/interpret that public third‑party content to generate and publish downstream actions, which could allow indirect prompt injection.