best-practices-researcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s runtime workflow uses user-provided conversation content to extract versions/conventions (scan project files like package.json) and then performs web searches, meaning outsider-authored free text can steer or be used for searching without selecting a specific item first.