teleport-acl-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: the skill runs $TCTL acl summary --review-only --format=json, then parses and renders fields like description, members[].reason, and last_review[].notes into the LLM-visible risk assessment table; these fields are untrusted free text authored by other parties (e.g., access list descriptions/member reasons/review notes), creating an indirect prompt-injection surface.