gitlab-docs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md instructs the agent to use WebFetch at runtime to load arbitrary docs.gitlab.com pages (public web content), whose extracted prose is then fed into the LLM context—an outsider source that can contain indirect prompt-injection text.