reference-design-contract

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s workflow ingests only user-provided inputs (“provided screenshots, URLs, existing DESIGN.md, brand docs, image artifacts, or user notes”) plus trusted first-party checklist files, and it does not describe an automatic read of arbitrary outsider-authored content without the user explicitly supplying it as evidence.