contacts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md/README_FOR_AGENTS.md describe a workflow where an end-user’s free-form message fields (e.g., contact name/query/profile) are passed into scripts/contacts.py via CLI arguments (add/search/get/update), which the script then searches and prints from the local contacts.json.