agent-hiring-panel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s required runtime workflow is to write an internal role spec and interview pack using the organization’s own real work backlog and to conduct reference checks from user/evaluations/documentation, but it does not specify that it reads outsider-authored free text from an externally submitted feed/queue (e.g., inbox/chat/tickets/issues) without first selecting specific items.