ingest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). SKILL.md requires reading the newly appeared file in raw/ completely and extracting key takeaways to create/update multiple wiki pages, so if that raw/ file is outsider-authored free text, it will be ingested into the LLM context via the runtime “read source file in raw/ completely” → “extract key takeaways” path.