d365

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly instructs the agent to "WebSearch" public conference sites and capture speakers, session abstracts, and LinkedIn URLs in the /d365 scan-conferences and /d365 improve workflows, meaning it fetches and ingests untrusted public web content that the agent must read and that can change its subsequent outputs and actions.