alert-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to gather and interpret threat intelligence and IOCs from public third‑party sources (e.g., VirusTotal, OTX, MISP, "TI platform") and to process alert payloads and threat‑intel reports as part of triage, so untrusted user‑generated web content can directly influence disposition and escalation decisions.