moai-kanban-foreman

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required runtime workflow reads outsider-authored free text from the project’s kanban backlog queue file (moai todo list --json / .moai/state/kanban/backlog.json), specifically card fields like text, and uses that content to select and dispatch workers.