address-findings

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill runs entire trail finding list <trail> --json --status open and then ingests each finding’s body and optional suggested unified-diff (outsider-authored review comments from the trail) into the agent’s context to decide/apply fixes, which is indirect prompt-injection exposure.