data-wizard

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The provided skill description shows generic ETL code that operates on user-supplied file paths/URIs (e.g., raw_data.csv passed to pd.read_csv / pd.read_json / pd.read_sql_query), but it does not specify any runtime workflow that ingests outsider-authored free text from an external feed/queue without first selecting specific user-provided sources.