team-ultra-analyze

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow for this skill reads outsider-authored free text from the user’s interactive feedback during the discussion loop (coordinator monitor.md → AskUserQuestion → userFeedback injected into DISCUSS-N task context and into ANALYZE-fix-N/DISCUSS CLI prompts), which is not authored by the operating user’s organization/system prompts.