vulnerability-writeup

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow instructs the agent to ingest supplied notes, disclosure documents, existing reports, PoCs, source trees, and scanner findings (SKILL.md lines 14, 57-70), which may include outsider-submitted vulnerability reports or inputs, but does not monitor or consume live outsider communication channels or external feeds without active human selection.