style-figma-clean

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill’s runtime SharePoint rowFormatter renders outsider-authored list item fields (e.g., [$Title], [$Status], [$Progress], [$Deadline]) into txtContent/background-color/border expressions, so any free text in those fields authored by others can be ingested into the LLM context via the agent’s rendering/formatting pipeline (indirect prompt injection risk).