nabla

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md instructs the agent to connect via the Membrane CLI and run actions (e.g., membrane action list / membrane action run) against Nabla to read Conversation/Message/User data, which is third‑party user-generated content the agent will ingest and could contain instructions that influence subsequent actions.