diagnose

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill “Diagnose” ingests arbitrary bug report/error text or pasted stack traces directly as its input and then uses that text as evidence during diagnosis (runtime workflow: user-provided inputs → evidence inspection/tracing → report), creating an indirect prompt-injection exposure path.