wiki-ingest-source

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill’s workflow ingests “raw research material (paper notes, web content, experimental data)” into a newly created source page, and that page body is LLM-readable prose at creation time, so if the operating user includes outsider-authored web content or other third-party text, it will be fed into the agent context via the “CC file write (page creation)” step.