research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow is generic “research” that can read outsider-authored web content only if the subagents fetch/search specific pages, but the provided skill requirements do not specify any ingestion of a monitored feed/queue or an automatic read of arbitrary outsider-submitted text.