Unclear The finding does not say what other origins previously could trigger execution or what the placeholder text says.
What
Running a command (command.run) or a skill (skill.prompt) now checks where the request came from. It only actually executes if it originates from the composer (the message input box) or a bridge message; otherwise it returns a placeholder message instead of running.
Why
This restricts skill and command execution to trusted origins, preventing them from being triggered from other, less expected sources.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
The finding does not say what other origins previously could trigger execution or what the placeholder text says.