wp-trac-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's scripts/search.php fetches live query results from the public WordPress Trac endpoint (https://core.trac.wordpress.org/query) and SKILL.md explicitly directs the agent to review those ticket results, exposing it to public/user-generated content that could influence subsequent actions.