analyze-findings

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill ingests the caller-provided findings bundle and reads raw codeFlows[] from the referenced SARIF report (<report.sarif>), which is outsider-authored free text if the SARIF/findings files originate from an external scan or other party rather than the operating user’s own workspace.