automation-hitlist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill’s Step 4 “research the options” explicitly allows using “web search if helpful,” which can fetch public web pages whose readable text may be ingested into the agent’s LLM context, creating an outsider free-text injection surface.