prior-authorization-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly states the assistant "locates the payer's imaging prior auth requirements," "pulls relevant ADA guideline recommendations," and that its interpretations are "based on publicly available payer policies," indicating it fetches and reads untrusted public payer/guideline content which can materially influence authorization decisions.