job-application-operator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to "Open exactly one job application URL" and to identify and inspect application forms on public platforms (e.g., Greenhouse, Lever, Workday) as part of its Application Loop in SKILL.md, which means it fetches and interprets untrusted third‑party web content that can materially influence filling/uploading decisions.