delegate-sol

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). [Skill delegate-sol.sh reads only the task text supplied by the caller via --task/--task-file/stdin to construct the prompt, and then reads the delegated pane’s own output (not any outsider-authored feed like email/chat/issue text), so there is no required runtime ingestion of arbitrary outsider free text from an external posting/queue.