assistant

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Outsider free text can be ingested when the user provides a URL (“When the user shares a URL for context”) and the skill uses WebFetch to pull arbitrary public page content, which is then summarized/extracted and fed into the agent’s LLM context.