alert-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill requires analyst alert triage and explicitly processes user-supplied content including alert payloads, log data, SIEM query results, and threat-intelligence reports, so an outsider can submit free text (e.g., via the alert/queue payload or user-provided alert data) that the runtime ingests before selecting a specific item.