referee

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow requires reading two outsider-authored free-text inputs (“bug report from Hunters” and “challenge decisions from a Skeptic”) and then cross-referencing them, so their prose is ingested into the agent’s LLM context via the provided files.