office-hours

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Phase 4 "Landscape Awareness" explicitly asks permission to "search the web for context on this space" and then ingests and synthesizes search results ("Search results" / "Three-Layer Synthesis") into the design document and verdict, which means the agent will fetch and interpret open/public third‑party content that can materially affect its decisions.