hunting-living-off-the-land-binaries

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly fetches and ingests the public LOLBAS JSON from https://lolbas-project.github.io/api/lolbas.json (shown in SKILL.md and scripts/agent.py) and directly uses those untrusted, community-maintained entries to build detection patterns and generate Sigma rules that materially affect the agent's behavior.