pipa-handover

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime path “Check tools and source quality / live app evidence is requested” explicitly reads runbooks/operational docs, acceptance/signoff output, open issues, and other connectors (via composio-mcp) that can include outsider-authored free text when those systems contain user/third-party content.