plugin-integration-checker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). This runtime workflow reads plugin-local files (e.g., plugin.json, and commands//agents/ markdown via grep -r and subsequent “read the command file/agent file” analysis), so an outsider who can add/modify those plugin files (e.g., submit a malicious plugin update) can supply free text that the workflow ingests.