webpage-to-markdown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly requires a public http/https URL and instructs the agent to "Fetch the URL with the best available webpage-reading tool" and then identify and convert the page's main content, so it will read and act on arbitrary, untrusted third-party webpages provided at runtime.