12-factor-app-modernization

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required "Step 1: Clone and Inventory" workflow explicitly tells the agent to "git clone " and to analyze repository files (Dockerfiles, manifests, code), which means it fetches and ingests arbitrary third-party repository content that the agent must read and use to drive analysis and remediation decisions.