coo-advisor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md’s required runtime workflow, the tools run locally on user-supplied JSON files via --input (e.g., scripts/okr_tracker.py and scripts/ops_efficiency_analyzer.py), so outsider-authored free text can be ingested as plain values (titles/notes/fields) without any prior selection/allowlist.