genre-skill-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly ingests and analyzes a user-provided corpus of article sections from project/corpus/ (text files, PDFs, markdown) — arbitrary third-party/user content the agent is expected to read and interpret as part of its workflow, creating a clear vector for indirect prompt injection.