ir-playbook

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill “ir-playbook” explicitly states it processes incident data at runtime (e.g., log entries, email headers/bodies, phishing payloads, C2 communications) that can be attacker-controlled free text, and it would ingest that content through the “user-provided context”/incident trigger inputs it relies on.