security-triage-finding

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s workflow ingests “supplied findings” from user-provided artifacts/snippets (e.g., SARIF snippets, CVE/GHSA or advisory descriptions, scanner tickets, bug bounty report snippets, or freeform vulnerability claims) and explicitly normalizes fields like claimed source/control/sink and evidence/counterevidence at runtime before verdicting.