measuring-pmf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow ingests outsider-authored free text via the skill’s bundled “sourced insights” content (e.g., guest quotes and stories) from references/guest-insights.md into the agent’s LLM context, which is not authored by the operating user.