grilling

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill documentation describes a form-based interview where the user’s free-text answers are ingested as subsequent messages (“Each form ends your turn; the user's answers arrive as the next message”), which is outsider-authored free text processed by the runtime workflow.