cve-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime “Live Context” fetches the CISA KEV catalog via curl from https://www.cisa.gov/...known_exploited_vulnerabilities.json, which is public web content authored by an outsider and ingested as readable JSON/prose into the agent’s LLM context for KEV cross-checking.