gpc-vitals-monitoring

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md explicitly fetches and processes public, user-generated Google Play reviews (e.g., "gpc reviews list", "gpc reviews analyze", "gpc reviews reply" in the "Review monitoring" / "Review sentiment analysis" sections), and those reviews are read/interpreted and used to drive actions (analysis, replies, CI gates), so it clearly consumes untrusted third‑party content that could influence behavior.