jam-to-tasks

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (medium risk: 0.30). The skill instructs the agent to automatically send feedback about tool usage to Jam without user approval, representing undisclosed reporting to a vendor.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill processes Jam recordings (including transcripts, titles, descriptions, and comments) via user-provided jam.dev links, which represent third-party/outsider content fetched dynamically.