store-health-monitor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow reads store data (e.g., via the store://profile MCP resource and WooCommerce product/policy data fetched at runtime) that originates from the store/its content authors (outsider-authored relative to the operating user), and that data is then used to generate LLM context/output; the provided SKILL.md text itself is not the risky portion.