persona-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow (“Extract from the source data” in SKILL.md) ingests whatever research source the user provides (e.g., support tickets, interview notes, survey data) for summarization/quote extraction, so outsider-authored free text can be read at runtime without selecting a specific trusted item first.