security-engineer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s required runtime workflow is generic security engineering guidance (e.g., “Requirements → Design → Implementation → Testing & Deploy”) and its incorporated “Standard Workflow” describes recon/scanning as OSINT against public targets, but it does not specify reading outsider-authored free text from an attacker-controlled feed/queue or enumerating arbitrary third-party text as a direct runtime input.