monitor-security

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's hourly threat-intel pipeline (described in SKILL.md and implemented in threat_intel.py) explicitly ingests public RSS/feeds (NVD, CISA, exploit-db) and social channels via the consume-feed and social-bridge skills and feeds those untrusted, user-generated/third-party items into dogpile and downstream prioritization (threat_intel_digest.json) that drives T2/T3 actions, so external content is read and can materially influence tool use and decisions.