the-sentinel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow reads “all member files” (and compares them to The Oracle’s template), which at runtime would ingest other members’ skill-file text authored by parties other than the operating user, creating an indirect prompt-injection surface via those documents’ free-form sections.