orchestrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s required runtime workflow is an orchestrator that routes to web/search/scrape providers (e.g., docs/web-researcher → web_search/web_fetch/web_crawl/structured_extract), which at runtime can ingest outsider-authored free text from fetched public web pages into the agent’s LLM context.