visual-asset-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md’s required workflow instructs the agent to “Read FIRST” from robolearn-interface/docs/chapter-index.md and robolearn-interface/docs/[part]/[chapter]/README.md, which at runtime would cause the LLM to ingest outsider-authored free text from those documentation files (unless they are guaranteed to be authored by the operating user/organization).