grocery-cart

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In SKILL.md step 1, the workflow ingests outsider free text only as the user’s own query parameter for public Peristyle recipe search (search_recipes(query=…) / list_recipes()), and does not automatically fetch or parse arbitrary external text/URLs into the LLM context.