research-service

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly requires using web_search and web_fetch and instructs checking public documentation and source/package contents (Step 1 and Step 1.5: “Use web_search, aws___read_documentation, and web_fetch” and commands to curl/unzip code), so it ingests and acts on untrusted third‑party web and repo content as part of its workflow.