sync-plate-ui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow ingests Plate registry source and generated changelog JSON from the local repo (e.g., apps/www/src/registry/** and /registry/changelog/*.json), which are outsider-authored relative to the downstream app’s user context, and then feeds that readable JSON/prose into the agent for planning/classification.