tfc-run-logs

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md "Core Workflow" explicitly fetches run data from Terraform Cloud (curl to https://app.terraform.io/api/v2/runs/...) and then curls the returned "log-read-url" archivist URLs to retrieve and display user-generated run/plan/apply logs, meaning the agent ingests untrusted third‑party content as part of its workflow.