image

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow involves optional connectors and general search/web evidence where scraped page text, reviews, and comments might be ingested as untrusted inputs, but the skill itself operates as an instruction package without an automated ingestion loop for outsider-authored feeds or queues.