harness-parity-council

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime adapters and first-round council loop ingest the outsider-provided <topic-or-artifact> (including issue/PR URLs) and pass it into external coding-agent CLIs whose stdout/stderr are then captured and included in the Claude-facing synthesis, creating an indirect prompt-injection surface from the outsiders’ authored content.