database-optimizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s runtime workflow ingests user-provided slow-query text only indirectly via “logs or pg_stat_statements” and then has the agent run EXPLAIN ANALYZE on the “suspect query,” so an outsider can submit poison text by posting queries that end up in those monitored sources.