ats-optimizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required workflow described in SKILL.md instructs the agent to “Copy the full JD text” (i.e., user-provided job description content) and then extract keywords from it, which is outsider-authored free text if the operating user did not author the JD themselves.