planning-with-files

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's main workflow and templates (SKILL.md's "2-Action Rule" and "Visual/Browser Findings" sections, plus templates/findings.md and references/examples.md showing "WebSearch" and browser/view operations) explicitly require performing and reading web/browser/search results from public sites and using those findings to update plans and drive next actions, so untrusted third‑party content can materially influence tool use and decisions.