icloud-pp-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s messages subcommands read the user’s local iMessage database file (~/Library/Messages/chat.db) and ingest message bodies into the LLM context; those message bodies are authored by other people (outsider chat participants), creating an indirect prompt-injection exposure path via local free text.