ats-refinement

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly requires authenticating to and calling an ATS scan (e.g., "Authenticate and call ATS scan" and "Jobscan scan ID or raw ATS response" in SKILL.md), meaning the agent ingests external Jobscan/ATS scan results (third‑party job/resume content) and parses them to drive recommendations, which exposes it to untrusted third‑party content that could carry injected instructions.