vos-authoring

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes a runtime where the user-authored VosConfigJson (including JS strings in fields like createContent/createTimeline and element content/src) is compiled and executed by the vos engine, meaning outsider-authored free text is ingested without requiring selection of a specific item.