production-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow runs the external commitshow audit engine, which analyzes public GitHub signals an outsider can influence, and the skill tells the agent to surface its concerns[].bullet text verbatim, so outsider-influenced text reaches the agent without it selecting a specific item.