dns-security

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The dns-security skill’s required runtime workflow ingests untrusted DNS configuration/zone file content from the user-provided target path (e.g., via Glob/Grep over named.conf/named/*.zone and related files), which can include outsider-controlled zone comments or TXT record values that the LLM will read and analyze.