why

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md requires the runtime workflow to enumerate available MCPs and then query external evidence categories (issue/ticket trackers, long-form docs, real-time team chat, observability, error tracking, analytics), ingesting free text from those outsider-authored records if those MCPs read them.