oodle-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md:55-61 and evals.md:40-52 describe reading the outsider-authored “O11y Change Context” blocks from recently merged PRs (via GitHub/Linear MCP or gh CLI), which are free-form text authored by others and can be ingested into the agent’s LLM context for manifest correlation.