pitch-deck

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). The skill reads and ingests outsider-authored markdown text from sibling runtime files—especially rat/assumption-test-plan.md (RAT results) and validation-canvas.md—and then embeds that content into the generated deck.html/speaker-notes.md, creating an indirect prompt-injection path via untrusted free-form text authored by others.