wiki

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow for this skill (“init/update/ask”) reads and incorporates repository markdown/code content into the agent’s context (e.g., “Read wiki/index.md… follow links” and “Open and read the actual source files”), and those files are outsider-authored relative to the operating user, creating an indirect prompt-injection path via the repo’s existing text.