showdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow reads each contender's instruction files in full during the audit (step 1), and those contenders are user-selected skills that may be community-authored, so an outsider can publish poisoned text but cannot force it into the workflow.