change-service

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to read and process container logs and run_once outputs, which are explicitly recognized as untrusted data boundaries containing potential outsider-authored free text (though treated strictly as evidence/data rather than instructions).