post-incident-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source SKILL.md describes a post-incident-review workflow that uses incident report/timeline/evidence/communication logs and other PIR inputs, which in practice are often outsider-authored (e.g., user tickets/emails/chat content captured in incident communications), and there is no requirement in the skill text that those artifacts be first-party/trusted before being ingested by the LLM.