build-deliverable-deck

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md Step 0 (“Load All Engagement Context”) instructs reading outsider-authored engagement artifacts from engagements/<customer>/CONTEXT.md and discovery/*.md / assessments/*.md, which would be ingested as free-form text into the agent’s LLM context at runtime.