internal-link-graph

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill’s runtime crawl phase fetches arbitrary site pages (via sitemap/robots discovery) and extracts their readable HTML text/paragraphs (content_text, content_paragraphs) for embedding and link recommendations, which is outsider-authored free text if the target site content is not authored by the operating user/organization.