operations

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Outsider free text can enter the LLM context via the required “Timeline raw material” input (e.g., “chat transcript” and “audit trail”), which may include messages/comments authored by non-operating users; the skill then uses that text to build the incident timeline and artifacts.