binlog-failure-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is ingested when the skill downloads the AzDO build artifact zip from a runtime-provided downloadUrl and then passes the extracted *.binlog contents into the binlog MCP tools (e.g., binlog_overview, binlog_errors), where the binlog’s embedded messages/errors/warnings originate from the CI pipeline’s build logs (not authored by the operating user).

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)