fallback-release

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's monitoring and incident-verification workflow explicitly fetches and parses public third-party endpoints (for example https://www.githubstatus.com/api/v2/status.json in scripts/monitor-ci.sh and SKILL.md, plus checks to crates.io/registry.npmjs.org and user-supplied incident URLs) and uses those responses to decide whether to activate the fallback release, so external untrusted web content can materially influence agent actions.