cli-delegation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill delegates user-authored tasks to external CLIs (Claude Code/Codex/Cursor) via in-session prompt/context, but this workflow itself only ingests the user’s query text and does not automatically read any outsider-authored external free text sources (e.g., emails, inboxes, issue bodies, web pages) at runtime.