postconductor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill workflow monitors and consumes RSS feeds, sitemaps, and content sources via tools like refresh_source, list_sources, and save_content_spikes, allowing outsider-submitted content/text to be ingested by the agent.