halo-cli-moderation-notifications

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's workflow explicitly reads and manages user-generated Halo comments, replies, and notifications (e.g., "halo comment list", "halo comment get", "halo comment reply list", "halo notification list" in SKILL.md), so the agent will ingest untrusted third-party content that could influence moderation actions.