apply

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime browser automation navigates to outsider-authored job postings/forms fetched from external ATS sites (e.g., Greenhouse/Lever/Workday URLs provided by the user or discovered at runtime), and the skill uses read_page/javascript_tool to ingest readable form content and tokens into the agent context.