interview

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In HTML mode, the skill serves an outsider-accessible web form and ingests their free-text from the posted /submit JSON body (including other_text and custom-image reasons), which is then used by the consuming agent after the LLM receives the user-entered content.