supply-chain-gate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). [Exclusion: The required workflow is instructed to “read the Socket PR comment / Alerts list” for triage evidence, which is provider-external and not shown here as a direct ingestion of arbitrary outsider-authored free text into the skill without first selecting specific Socket alert items/workflow outputs.]