memory-sync-setup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required runtime workflow for the emitted /memory-sync skill, the coordinator’s user-supplied “free-form prompt” becomes {FOCUS} and is then used while the skill reads and edits the project’s instruction-memory files across the whole swept surface, so outsider text can influence generation over LLM-ingested repo content.