wp-trac-timeline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill's script (scripts/timeline.php) fetches and parses the public WordPress Trac RSS feed at https://core.trac.wordpress.org/timeline (invoked per SKILL.md step 3), so it ingests untrusted, user-generated third‑party content that the agent reads and presents, creating a risk of indirect prompt injection.