claim-check

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s required runtime workflow reads user-provided/persisted application materials and documents from the tenant workspace (e.g., my-documents/resume.md, my-documents/cv.md, my-documents/story-bank.md, my-documents/applications/*/resume.md, and my-documents/applications/*/coverletter.md), which can include outsider-authored free text when the user pastes or imports it into those files.