tb-update-task-status

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill runs node bin/tb-api.mjs commands (steps 2 and 4) to fetch project tasks and taskflow statuses from a Teambition project (third-party, user-generated content) and then reads/uses those results to choose and update tasks, so untrusted external content can influence which actions the agent takes.