internal-links

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Skill.md’s required runtime workflow (“Using a site crawl, build a map of internal links” and “Flag pages with in-degree < 2… Check anchor text…”) ingests crawl-derived on-site page content/anchors, which could include outsider-authored text if the site accepts user-generated content or otherwise includes external submissions.