oil-gas-delegation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required runtime workflow delegates to petropowers:subagent-driven-development/petropowers:brainstorming/petropowers:writing-plans, which (by design) can incorporate outsider-authored free text from user-provided requirements and any external sources those subskills fetch/ingest, creating an indirect prompt-injection path; this SKILL.md itself doesn’t constrain those subskills to only trusted internal text.