structured-data

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to inspect and audit external webpages using Search Console tools (e.g., tool_inspect_url and tool_get_search_analytics) in SKILL.md, which requires fetching and interpreting untrusted public URLs and their structured data as part of its workflow.