release-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md Phase 5b (“Docs reconciliation”) requires reading in-tree runbooks/docs (which are outsider-authored if the operating user didn’t author them) and then uses their contents to drive LLM-based doc-claim-validator validation, so free-form runbook text can enter the agent context.