dispatch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill delegates to external AI CLIs (Codex/Antigravity) and then ingests their returned outputs as readable text into Claude Code’s LLM context; those outputs are generated by an outsider system (not authored by the operating user), creating an indirect prompt-injection surface.