backend-scheduling-cron

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow only consumes user-provided job configuration fields (e.g., cron expressions, timezone, handler settings) after the user triggers it via phrases like “cron/schedule,” which is outsider-authored free text ingested by the scheduler logic before any specific item selection.