customer-support-ops

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's triage automation and auto-response rules (SKILL.md and references/triage-automation.md) explicitly ingest and act on untrusted user-generated ticket content (subject/body) — e.g., keyword rules that set priority, route queues, and auto-send macros — so third-party inputs can materially influence actions and tool use.