automated-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). [SKILL.md describes an activation flow that uses first-party, user-invoked Monte Carlo MCP tools to fetch and troubleshoot “alerts,” but it does not specify any runtime ingestion of outsider-authored free text from an external feed/queue (it only references user instructions and alert data returned by Monte Carlo tools, with no pathway for arbitrary user-submitted text to be consumed without first selecting alert items).]