full-cycle

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to read peer code and investigate repositories during research and review stages, but does not monitor or consume external untrusted communication feeds like issues or tickets.