ios-data-persistence

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow and deep-dive explicitly show ingesting remote, potentially user-generated data—e.g., API-backed sync via apiClient.get in references/skill-deep-dive.md (Section 5: Repository Pattern) and CloudKit public/shared data in references/icloud-sync.md—so the agent/application will read and act on untrusted third-party content that can influence behavior.