research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The research skill’s runtime workflow can perform web searches and “execute the search” (report frame step 4; opportunity frame sub-agents for investigate surfaces), which ingests outsider-authored free text from public web pages into the agent’s LLM context for synthesis.