central-station

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Central Station’s required workflow can fetch outsider-authored public thread content (including full bodies) via https://station-server.railway.com/api/llms-station or per-thread endpoints, which can then be ingested by the LLM when the skill searches/browses threads without requiring selection beyond initiating the search.