sentiment-feedback-loop

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's "Source Intake" explicitly lists "community threads" and "surveys"—user-generated, potentially public/untrusted content—that the agent is intended to ingest and interpret as part of its workflow, exposing it to indirect prompt injection risk.