ping-orchestration-android-sdk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime wizard collects required parameters via AskUserQuestion (user-provided free text), which is then summarized and fed into the agent/LLM context; this is outsider-authored input because it comes from the operating user’s chat message rather than the skill’s bundled reference material.