100x-search-query

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md/workflow.md Phase 1 reads user-supplied free-text fields (notably category, optional product_name, and optional persona/insight card fields) to generate the output queries.*.q and queries.*.intent_cn, so an outsider can inject arbitrary text directly via the skill call.