diagram-design-editorial

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's "Brand Onboarding" instructions in SKILL.md explicitly tell Claude to fetch a target site's homepage (e.g., "onboard diagram-design to https://yoursite.com") and extract palette/font tokens from that public website, meaning it ingests untrusted third‑party page content that directly influences styling and generation decisions.