power-automate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required subfiles (see SKILL.md "REQUIRED: Load Sub-Files Before Implementation") include desktop-flows.md which explicitly recommends "Web scraping (no API)" and shows "Navigate to URL: %ApplicationURL% ... Extract data from web page" (and expressions.md shows HTTP actions to external endpoints), meaning the agent is expected to fetch and interpret arbitrary public web content that could materially influence flow decisions.