competition-bundle-sourcemap-recovery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md’s required workflow instructs the agent to “record” and “load” served artifact truth (entry HTML, manifests, chunk registries, source map URLs, and source maps) at runtime, which are outsider-authored free-text artifacts fetched from the target web/app rather than the user’s own repository.