content-portability

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly reads pages/posts and builder JSON from arbitrary WordPress sites via wordpress_read_page/wordpress_read_post and wordpress_list_media during export/import (see "Phase 2: Content Enumeration" and "Phase 6: Rewrite & Inject Builder Data" in SKILL.md), and then uses that untrusted, user-generated content to rewrite IDs and call wordpress_inject_builder_content—allowing third-party content to materially influence tool actions.