workflow-fix-and-ship

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md’s required workflow instructs the agent to “pull Sentry + logs” and “pull Supabase logs” via MCP tool calls at runtime; those logs/issues are outside-authored free text from third-party systems, which can be ingested into the LLM context through the tool outputs.