resolve-cve

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs the agent to use WebSearch to look up the CVE on the public NVD (e.g., "CVE-2026-33231 NVD") to obtain the CVSS score, meaning it fetches and interprets content from an open/public third-party site that can influence the assessment and subsequent actions.