motherduck-design-dive

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md workflow step 1 says to “Inspect the existing Dive, supplied design paper, screenshots, and live schema” and step 30 says to run a screenshot/evidence workflow, which implies the runtime ingests user-supplied design text/assets without requiring any prior selection of a specific trusted item.