feature-spike

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill “Feature Spike” uses user-authored prompts to instruct end-to-end probes and representative “resource shapes and failure responses,” which implies the runtime may ingest free text that is part of external interactions (e.g., remote responses) as evidence inputs.