astro-content

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime ingests Markdown/MDX frontmatter and body content from repository src/content/ files or a configured content-layer loader (e.g., glob(...) over **/*.md/file(...)), which can be authored by outsiders if they can submit those files/entries to the repo or loader’s source.