forensics-osquery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime, osqueryd executes scheduled queries and ingests endpoint-derived free-text fields (e.g., processes.cmdline, processes.path, logged_in_users.host, file.path, registry.data) into the agent’s context via the skill’s evidence export/JSON parsing path (e.g., ./scripts/osquery_triage.sh > incident_triage_*.json and subsequent parsing), where those strings can contain attacker-controlled content.