a2a-protocol

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly instructs the agent to fetch and parse public agent cards from well-known URIs (e.g., https://{domain}/.well-known/agent-card.json) and to act on fields like capabilities and security_schemes (e.g., whether to use streaming), which are untrusted third-party content that can materially alter behavior.