fact-check

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime path ingests the user-provided draft/document text (“Read the document. Extract every verifiable claim…”) and then performs web verification based on those extracted claims, meaning outsider-authored free text directly drives what the agent reads from the web.