reviewer-response-and-revision

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md describes a workflow that “reads the editor decision document and reviewer comments” and then includes “Komentar Reviewer: Salinan teks asli komentar reviewer” into the generated response, meaning outsider-authored reviewer free text is ingested into the agent’s LLM context at runtime.