evidence-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill.md’s runtime workflow ingests evidence from “external systems…docs…public precedent” in ecosystem/mixed modes by spawning subagents to gather authoritative sources, which can include outsider-authored free text when those sources are from non-trusted publishers.