ui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s required workflow routes and loads UI context from trusted project-local files, first-party uidotsh://ui resources, an internal companion skills set, or specific external UI inspiration sources, but it does not ingest outsider-authored free text from queues/feeds/tickets or other arbitrary user-submitted text at runtime.