app-intents

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill documentation describes App Intents runtime entrypoints (e.g., perform() and entity queries) that ingest user-provided Siri/Shortcuts spoken text as intent parameters, but it does not specify any outsider-accessible queue/feed where free text can be posted and read without first selecting a specific item.