visit-metadata-extractor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly requires "html_content: Raw HTML from inspection report" and says it processes "raw HTML from CCLD inspection reports", meaning it ingests public third‑party webpages (CCLD reports) and parses that untrusted content to produce metadata that drives downstream extractors and database actions, so the content could indirectly influence agent behavior.