internalized-wiki

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Ingest "Fetch Raw Source" step explicitly instructs the agent to "Get the source content with available web or file tools" and save it under raw/ (preserving source text), and the Compile/Cascade steps require the agent to read and act on those external sources when creating/updating articles, so untrusted third-party web/forum content can directly influence agent decisions and actions.