contextualize

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Step 3 ("External references and state of the art") explicitly requires using WebSearch and WebFetch and to "fetch any URLs the user provided or that surfaced from the codebase scan," so the agent will read and act on untrusted public web content that can influence downstream decisions.