conveyor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow fetches issues carrying ready labels from an issue tracker and reads issue states and files, which can contain outsider-authored text from untrusted external contributors.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill prompt instructs the agent to launch worker agents with the --dangerously-skip-permissions flag, which bypasses security mechanisms on the machine.