building-workflows

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a PostHog workflow runtime where workflows-test-run/monitoring tools expose the triggering payload (globals via event/person/groups and workflows-get-invocation → invocation_globals) into the step execution trace/logs, meaning outsider-authored content can enter via the monitored trigger event payload.