dispute-resolver

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The Dispute Resolver skill’s required runtime workflow appears to take the user’s dispute context (e.g., “parties… timeline… agreed facts, disputed facts… stated positions”) and use that free text to produce dispute summaries and agreements, so an outsider can submit poison via the skill’s direct input brief.