subsystem-summary-of-historywork

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill downloads and parses files from remote history archives (e.g., GetRemoteFileWork/GetAndUnzipRemoteFileWork and GetHistoryArchiveStateWork fetch and parse HAS JSON and XDR files from history archives) and uses that content to drive verification, publish, and adopt flows, so untrusted archive content can materially influence subsequent actions.