duo-retention

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). Yes — SKILL.md explicitly instructs the agent to "Source the Duolingo Handbook (Take the Long View) and blog.duolingo.com", i.e., consume public third-party website content as part of its workflow, which could materially influence recommendations and enable indirect prompt injection.