implementing-threat-intelligence-lifecycle-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md’s required runtime workflow fetches outsider-authored free text/JSON from public web sources (e.g., CISA KEV feed and MalwareBazaar via requests.get/requests.post), which is then loaded into variables like data/vulns/raw_data and ultimately into the agent’s LLM-relevant context via the analysis/brief objects.