slide-decks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly allows enabling web search in GenerateOutline (GenerateOutlineRequest.web_search_enabled) and accepts reference file_s3_keys for arbitrary/public PDFs (see the Generate Outline examples and Workflow B), so the API can ingest untrusted web or user-provided content that can materially change subsequent generation and agent actions.