optise-helix-fitq-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's mandatory workflow (Section 4 Step 3: "Run fetch_page.py" and the scripts/fetch_page.py code) fetches and parses arbitrary public URLs' rendered HTML and uses that untrusted third‑party content to compute FITq scores and drive fixes/hand-offs, so external page content can materially influence the agent's decisions.