doc-coauthoring

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s Stage 1 “Context Gathering” explicitly instructs the user to provide (or link) “team channels or threads to read” and “shared documents,” and if those integrations are available it will “read now” and “use the appropriate integration to fetch it,” meaning outsider-authored free text from those external sources can be ingested at runtime.