using-islo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow for standalone jobs (“jobs.md”) has the agent set up and deploy a job manifest that will run agent steps, and those job stages can be configured to process external event/payload-derived text at runtime (e.g., via webhook/integration triggers), so outsider-authored free text can be consumed by the job/agent without any selection gate.