nooa-trace-explorer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes runtime ingestion of traces authored by an external system (local OTLP .jsonl files or viewer HTTP API data via from_file(...) / from_viewer(...) / TraceExplorerClient), which can contain arbitrary free text from non-first-party sources inside the trace spans that the LLM context methods (e.g., get_overview, get_turn, search) parse and return.