ai-search-remediation-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). This skill’s required workflow ingests “other audits' findings” to convert them into tickets (outsider-authored free-text from issue/audit findings) and then produces those into the agent’s LLM context as part of its remediation output generation; no explicit exclusion indicates that only user-authored text is fed.