agent-orchestrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md explicitly instructs the agent to call tools like ao_issues, ao_review_check, ao_spawn and to read PR review comments, issues, and CI failures (GitHub owner/repo content) as part of its workflow, which exposes it to untrusted, user-generated third-party content that can influence agent actions.