deep-learner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md Step 1) explicitly fetches content from arbitrary URLs using "WebFetch" and (Lớp 3) uses "WebSearch" to pull supplemental web sources, so the agent will read and act on open/public third‑party content (potentially user‑generated/untrusted) as part of its analysis and decision flow.