plantuml

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL-PDA.md resilient workflow explicitly instructs an "Error Fallback: Perplexity → Brave Search → Gemini → WebSearch", which means the agent will fetch and read open web/search results (user-generated/untrusted sources like StackOverflow/GitHub referenced elsewhere) as part of its runtime troubleshooting workflow and those results can change subsequent actions—introducing indirect prompt-injection risk.