book-2-site

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's reference.md (Non-PDF extraction procedure §6) explicitly instructs the agent to "Research the best current Python library via WebSearch" and verify package docs and install packages, which requires fetching and interpreting open/public third‑party webpages (package docs, PyPI pages) and then acting (choosing/installing libraries and extraction commands), so untrusted web content can materially influence tool use and next actions.