web-scrape

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and processes arbitrary public web pages (see SKILL.md capabilities like fetch_page, extract_text, extract_links and the schema.yaml input "url" which require a fully-qualified URL), so it ingests untrusted third-party content that the agent reads and which can materially influence subsequent actions.