apex-change-control-board
Use when the user asks to "set up change control", "evaluate change requests", "manage scope changes", "establish CCB governance", or "process a change request". Activates when a stakeholder needs to establish a change control process, create change request templates, define CCB composition and decision criteria, evaluate change impact on scope/schedule/cost, or track change request trends across the project.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
The required workflow involves evaluating change requests (e.g., via the Change Request Analyst and Impact Assessor sub-agents), which ingest user/stakeholder-submitted text payloads representing external change requests.
- Repository
JaviMontano/mao-discovery-framework
- Revision
15f6e4a
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.