pace-dashboard-configure

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime path ingests outsider-authored free text from public web sources via adapters like rss (arbitrary urls fetched at runtime) and hackernews/lobsters/youtube (public feeds), which then become item text passed into LLM transforms such as llm-filter/llm-summarize/llm-rank/llm-merge when configured.