health

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The workflow explicitly includes reading a “sector reference file for evidence” (SKILL.md:23) which is provided as a Uganda health sector profile document containing substantial narrative/free-text evidence (references/uganda-health-sector.md:7-118), so outsider-authored text from external institutions is ingested into the agent’s LLM context.