tzai-infographic

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md shows /tzai-infographic takes “Slash arguments / remaining user text” as a subject only and injects kind/art direction itself into bash "$ENGINE" infographic --prompt "<user subject>", so outsider-authored free text (the user’s message) is directly ingested at runtime.