cli-oss-scout

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is ingested when the skill performs runtime keyword searches and “collect[s] direct links to result pages” and “browser-rendered search result” content, which the agent then reads to build/enrich candidate evidence (public web pages/search snippets from non-user sources).