g2b-sanctioned-supplier

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Runtime path: the helper calls k-skill-proxy (GET /v1/g2b/sanctioned-supplier?...) and then read_json_response() parses the proxy’s HTTP response body into JSON text that is printed/used as the agent’s context; that response originates from the outsider public service 공공데이터포털/조달청 나라장터 사용자정보 서비스 (data.go.kr / apis.data.go.kr), i.e., outsider-authored content.