sf-performance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly instructs the agent to "Always fetch live documentation first" using web searches and an explicit WebFetch of public sites (developer.salesforce.com/docs and web.dev/vitals), meaning the agent will fetch and interpret open/public third‑party content as part of its workflow and let that content influence implementation decisions.