web-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s required runtime workflow explicitly uses WebSearch to find and WebFetch to extract full bodies from top outsider-authored URLs (“Pick…URLs to fetch…run WebFetch…Extract…Ignore…ads”), so attacker-submitted text on arbitrary web pages can be ingested.