epd-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly directs the agent to "search the web" and fetch/listings from public registries and manufacturer sites (e.g., buildingtransparency.org/EC3, environdec.com, ul.com and manufacturer sustainability pages) using WebFetch and to parse those pages so their content (GWP, declarations, links) directly drives ranking, recommendations, and saves to the Google Sheet, which exposes the agent to untrusted third‑party content that could carry indirect prompt injection.