taku-debug

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Phase 2 instructions explicitly tell the agent to "search the web for '{framework} {error type}'" (with only a basic sanitize note), which requires fetching and interpreting open/public, untrusted web content that could influence hypotheses and actions.