malware-forensics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly enriches and checks IOCs against public threat-intel feeds (e.g., enrich_iocs(..., sources=["virustotal","threatfox","urlhaus"]), check_threat_intel(feeds=["malwarebazaar","virustotal","threatfox"]) and related VT/MalwareBazaar config), which fetches and interprets untrusted/user-submitted content from third-party websites.