planning-with-files

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly allows and instructs web browsing/search (allowed-tools: WebSearch/WebFetch) and its core workflow and templates (SKILL.md, templates/findings.md, and examples.md) require performing WebSearch/WebFetch and capturing research from public websites, so untrusted third‑party content can be read and used to influence planning and subsequent tool actions.