reset-context-contamination

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s workflow only uses the current conversation thread text provided by the user (“extract” and “re-derive in-thread”), with no external fetching or ingestion of outsider-authored content beyond that in-thread input.