decision-tree-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs subagents to use available retrieval tools to gather probabilities and payoffs, which can fetch arbitrary web content or outsider text if searches return untrusted pages.