ace-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow ingests prior session messages by calling om-session tools (session-list / session-read) or via “Direct context analysis (current conversation)”, meaning outsider-authored session/chat text can be analyzed without first selecting specific trusted items.