brand-design-md

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow installs and then invokes a skill that “fetches the precise design tokens” for brands at runtime, which implies it retrieves outsider-authored web content (public brand/design token sources) and feeds that readable text into the agent’s LLM context.