ecs-build

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow includes “Always search the internet” (SKILL.md:36-42) and “search the internet for the latest module and provider versions” (SKILL.md:115-116), which at runtime can fetch public web content and ingest it as readable text into the agent’s LLM context (indirect prompt-injection risk).