customer-panel-of-experts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill instructs the agent to read connected tools and local files (personas/ and icp-profile.md via icp-deep-scanner) to build customer personas, which may ingest external customer data containing outsider-authored free text.