figure-composer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime LLM context is fed by outsider-authored free text from the user-provided existing figure image via derive_outline(...) (vision-model-derived strings from figure_png_path pixels), which is untrusted input and not authored by the operating user.