apc-launchpad

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). Outsider-authored free text from the user can be ingested at runtime via the project-specific “catalog”/metadata-catalog.mjs inputs that the skill uses to PATCH App Store Connect fields (e.g., subtitle, review notes, IAP review notes/screenshot notes, “What’s New”/promotional text), but the workflow is not shown as reading from outsider-controlled external feeds/queues without first requiring the user to provide those specific strings.