site-history

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). In /as:site-history, the required runtime workflow performs targeted web searches and fetches “the most relevant results” based on a user-provided site address/location, so outsider-authored text from those web pages can be ingested (even if the skill prefers government/non-profit sources).