maple-preview

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source: user.builder free-text request is used to perform a search and multiple candidate lookups, then the skill renders externally obtained candidate fields (e.g., names/notes and sprite thumbnail/image URLs) into a generated HTML page at runtime, so outsider-authored text can influence what the workflow ingests without requiring pre-selection of a specific item.