Azure DevOps Admin

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly shows fetching and using public third-party content that the agent would ingest and act on—e.g., upstream feed sources pointing to npmjs/nuget/pypi in references/artifact-feeds.md, Embedded Web Page and custom widget code that fetches an arbitrary serviceUrl in references/dashboards-widgets.md, and installing pipeline-decorator/extensions from the Marketplace in references/extensions-marketplace.md—any of which are untrusted and can materially change behavior.