third-party-snt

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires verifying state Medicaid manual treatment and "require statute URLs or official guidance" (see Step 1: Validate Intake and Map State Law and the guideline "Do not rely on memory… require statute URLs or official guidance"), which means the agent is expected to fetch/ingest open/public third-party legal materials that could materially change drafting decisions.