policy-diff

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required Step 0 explicitly instructs verifying regulation status "通过法律研究MCP或如已启用的网络搜索或发布机构的官方网站", which requires fetching and reading open/public websites or search results (third‑party content) that the agent will interpret and use to influence its analysis and next actions.