sf-ai-agentforce-persona

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md design flow explicitly accepts "Organization URL" and "brand guide PDF" as required inputs (see "Step 1: Input" and the one-shot capability "Drop a brand guide PDF → view sample dialog") and Step 3A specifies extracting persona signals from that input, which clearly entails fetching/ingesting and interpreting arbitrary public/third‑party content that will materially influence persona generation and subsequent encoding decisions.