grammarly-core-workflow-a

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow only sends a caller-provided text field to Grammarly’s Writing Score API over HTTPS (e.g., fetch('https://api.grammarly.com/ecosystem/api/v2/scores', ...)) and does not describe reading any outsider-authored free text from queues/feeds/inbox/comment/tickets at runtime.