axiom-testflight-triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly instructs the agent to parse and analyze user-provided crash reports and TestFlight feedback (see "Claude-Assisted Interpretation" / "Using the Crash Analyzer Agent" where it asks to "paste full crash report" and the Feedback Inspector sections showing tester comments/screenshots), which are untrusted, user-generated third-party content that the agent is expected to read and use to drive analysis and next actions.