indication-dossier

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s Phase 1–4 runtime workflow uses WebSearch/WebFetch to fetch public web pages (e.g., FDA guidance, guidelines, and trial pages) and then reads the fetched page/PDF text into the agent context, which can include outsider-authored free text (public web content) that may contain indirect prompt-injection payloads.