test-tagging

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md’s required runtime workflow ingests and analyzes outsider-authored test source code supplied by the user (via the “Test project or files” path) by scanning test methods’ bodies, names, and assertions to assign traits, but it does not define any external feed/inbox/chat/issue-reading path for arbitrary text submission.