elysia

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow described in SKILL.md defines an HTTP/WebSocket server using request/body/query/params schemas (and WebSocket message bodies), so outsider-authored free text from incoming client requests is directly ingested by the application and could be processed by any downstream logic.