openai-agents-sdk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly includes a research_agent with WebSearchTool() under "3. Tools — Hosted Tools" that "search[es] the web" and is used to produce cited summaries, so the agent will fetch and interpret untrusted public web content that can materially influence its outputs and actions.