incident-to-skill-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to read the full Slack incident channel and threads (user-generated third-party content) and to use that content as primary evidence to decide, author, and publish skills (including posting back), which could enable indirect prompt injection.