insecure-source-code-management

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to fetch external URLs and version control artifacts, which can contain outsider-authored text when targeting third-party endpoints, but this requires active search and fetching rather than a monitored inbound feed.