moai-domain-html-report

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill renders user-supplied markdown into HTML templates (e.g., {{{.}}}, {{tldr_html}}, {{body_html}}, {{log_excerpt}}, {{diagram_svg}}) that become readable prose in the generated .html, so any upstream outsider-authored free text included in that markdown will be ingested into the LLM context via the markdown argument.