why

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). On required runtime workflow, the skill enumerates available MCPs then queries multiple evidence categories (including issue/ticket tracker, long-form docs, real-time team chat, observability, error tracking, and product analytics) that can contain outsider-authored free text (e.g., external comments/messages/ticket text) directly from those systems without selecting a specific pre-chosen item.