drop-off-rescue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's Step 6 explicitly tells the agent to "WebFetch" a user-provided brand URL to pick up tone, so it will fetch and interpret arbitrary public web pages (third‑party content) and use that content to influence email drafting and subsequent actions.