moai-foundation-core

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly delegates to Tier 4 "MCP Integrators" (modules/agents-reference.md) and shows Agent calls like Agent(subagent_type="mcp-context7", prompt="Research React 19 APIs") and references mcp-playwright ("Browser automation and E2E testing") in modules (and execution-rules.md), which indicates it fetches/reads external/public documentation/web pages and uses those results to drive subsequent agent decisions and delegation.