spike

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to use web_extract and web_search to fetch documentation and information from arbitrary web pages during the research phase, exposing the agent to low-risk outsider-authored free text.