XIP Writing Reference

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly treats GitHub issues as the "source of truth" and directs using the sync-xips workflow and sync-from-github.ps1 to read/sync issue bodies from GitHub, meaning the agent will ingest and act on untrusted, user-generated content from public GitHub issues.