execution-trace

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow (Step 4 "Gather execution evidence" and the "Common sources" list) explicitly directs the agent to scan tracker systems and artifacts (Linear/Jira, GitHub/GitLab issues and PRs, CI output, demo/QA notes), which are untrusted/user-generated third-party sources the agent must read and interpret to decide trace status.