lesson-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). [SKILL.md] describes generating a self-contained browser artifact (index.html/styles.css/script.js) and explicitly treats any web search results as untrusted, but it does not include any runtime workflow that ingests outsider-authored free text from an external user-submitted feed (e.g., email/chat/tickets/issues); it only optionally uses/searches sources the user requests and then renders/cites them.