aiox-autopilot

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Phase 0 Discovery explicitly mandates performing "web_search" for competitors and trending tech (see Phase 0: DISCOVERY and aap-analyst-discover.md), and multiple planner tasks also call web research to choose stacks—so the agent will fetch and interpret open/public web content that directly informs decisions and actions.