improve-website

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). [Skill.md] describes reading user-provided conversion problems, real visitor input (e.g., “exit surveys, reviews, support tickets, recordings”) and page URLs/copy as “real visitor input” passed into the invoked phase skills (not first-party trusted docs), creating runtime ingestion of outsider-authored free text.