basel-rwa-market

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly instructs the agent to "Always load jurisdiction overlay to confirm current FRTB implementation status" and even notes "TBD (check Fed website)" / "check APRA" in the FRTB Implementation Status section, which requires fetching and interpreting public regulator webpages/overlays as part of the workflow and could therefore allow third-party content to influence decisions.