web-media-getter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). At runtime, the web-media skill queries and downloads from multiple public third-party media sources (e.g., Openverse/Wikimedia/Internet Archive/LOC/NASA and other registries), ingesting their fetched page text/metadata and attribution fields into the agent’s LLM context via the normalized result list and optional attribution.json sidecar.