specifying-plant-models

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow (SKILL.md — Step 3 "Research the Physics Domain") explicitly instructs the agent to use web_search and read_web_page to fetch and interpret open web pages and reference parameters, so untrusted public third‑party content is read and can materially influence modeling decisions and subsequent tool actions.