friction-log

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s REQUIRED workflow reads any URLs found in the user’s initial prompt and fetches their content at runtime (via a web/url fetch tool), which can include outsider-authored free text that is then ingested into the agent’s LLM context.