simple-english

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow ingests outsider-authored free text whenever the user selects “Inline” (pastes text into the message) or “File” (points to a file whose contents are loaded via read_file and rewritten), so an outsider can submit arbitrary text to the workflow’s rewriting/checking pipeline.