migrate-oxygen-to-breakdance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly reads and interprets site content (e.g., via wordpress_list_pages, wordpress_list_posts, wordpress_extract_builder_content and wordpress_read_page) from the target WordPress site — which is untrusted/user-generated content — and uses that content to drive migration decisions and create duplicates, so third-party content can materially influence tool actions.