scout

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill “scout” performs multiple live web searches and reads externally sourced content (e.g., in the Canon/Ecosystem/Commercial/Verdicts/Lane types) to extract candidates tied to “URL[s] you actually saw in results this run,” so outsider-authored free text can be ingested via search result pages and the linked webpages it opens.