squad

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The runtime path is api GET /board?summary=true (and other api GET calls in SKILL.md) which retrieves board/task JSON containing outsider-authored free text fields like task titles/descriptions/notes from other users, and that response is then embedded into agent/LLM context for rendering/processing.