uipath-automation-discovery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). Yes—SKILL.md requires Phase 1 “web research” (priority 7) and Phase 3 business context research via web search, which at runtime can fetch public web content and inject its free text into the agent’s LLM context.