function

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s required runtime workflow uses Membrane CLI to interact with Function via explicitly executed CLI commands (e.g., searching/listing actions and then running/sending proxy requests), and it does not describe ingesting arbitrary outsider-authored free text from an inbox/feed/ticket into the LLM before selecting specific items/actions.