glean-agent-toolkit-guide

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly exposes tools that fetch and ingest public web and URL content—e.g., "glean_web_search" (Search the public web) and "glean_read_document" (Read full document content by ID or URL)—which agents are expected to read and can materially influence subsequent actions.