asana

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill calls the Asana API (base URL https://app.asana.com/api/1.0) and reads user-generated resources such as Tasks, Stories, Attachments and Comments via the API, so the agent would ingest untrusted third-party content that could include injected instructions.