xdto-edit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill /xdto-edit ingests outsider-supplied free text via runtime command-line parameters (notably -Value and optionally -Target), which are parsed as XML fragments / inserted into the XSD/model during decompile→edit→compile, e.g., Import-Fragment uses -Value and Edit-Metadata writes -Value into metadata text.