pipa-get-work

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s “Required Inputs” and “Source Methods” explicitly include outsider-authored free text sources such as “messages” and “search results,” which implies the workflow can ingest arbitrary user/outsider content at runtime when provided as a source.