pipeline-security

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The pipeline-security skill ingests and reads outsider-authored CI/CD configuration files from the target repository at runtime (via discovery/Glob and then “Read each pipeline configuration file” using Read/Grep), and those files may contain attacker-controlled text.