docsync-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow for this skill uses project-local Claude Code hooks (assets/docsync-track.mjs, assets/docsync-watch.mjs, assets/docsync-gate.mjs) that ingest free text from outsider-authored .md files in the workspace at runtime (via readFileSync(...) parsing frontmatter and via st.touched paths recorded on tool Read/Write/Edit), enabling indirect prompt injection through the last_updated/sync_procedure/frontmatter content of those documents.