Triage

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's runbook explicitly tells the agent to "Check vendor status page" (references/runbooks-communication.md, "Runbook: Third-Party Service Issue Response"), which requires fetching and interpreting public third‑party site content that can materially influence mitigation and handoff decisions, so it exposes the agent to untrusted third‑party content.