docs-canvas

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the runtime flow explicitly takes user-provided source material (directory of markdown files, a single doc URL, an inline outline, or a question from the codebase) to collect headings/code blocks and render them into a docs canvas, so outsider-authored free text can be ingested when the user supplies it.