azdo-build-investigator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s workflow uses az devops invoke to fetch build timeline records and raw log text from the provided AZDO build URL (outsider-authored pipeline run logs/artifacts written by other users/agents), which is then ingested into the agent’s LLM context via the command outputs and saved log text.