ioc-hunter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly directs ingesting open/public feeds (e.g., via MISP-sync, STIX/TAXII, OpenCTI connectors and community sources like AlienVault OTX and abuse.ch), so the agent will read untrusted, user-generated IOC content that directly drives deduplication, confidence scoring, SIEM/EDR ingestion and retro-hunt actions.