nuke-code

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the “Fresh validator” step under SHIP runs a fresh validator that receives “exactly the task text, the done-criteria, the diff, repo access,” where the task text is sourced from the user/outsider free-text without any requirement to select a specific trusted item first.