storm

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs sub-agents to perform web searches using WebSearch and query reference repositories, but the agent does not ingest attacker-controlled free text without a specific user or selection gate (since WebSearch results and official docs are ranked and filtered via source priority).