cite-recon

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s Step 1 explicitly instructs using WebSearch/WebFetch to read “current regulatory guidance,” which typically ingests public web page text authored by outsiders into the agent’s LLM context at runtime.