openpress-plugins

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Skill.md’s workflow (“Handle User Response”) and adapters require the agent to invoke external plugins (diagram-design/gc-minimal-zine-poster) and adapt their outputs, but the provided runtime workflow does not describe reading any outsider-authored free text from monitored feeds/queues or fetching arbitrary user-submitted content before selecting specific items.