whose-number-is-this

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). [Skill.md Step 5 instructs the agent to search “every written format” of a provided phone number across multiple search engines and OSINT sources (e.g., classified ads, forum signatures, archived pages), which necessarily ingests outsider-authored free text from those web pages/results at runtime via the search/browsing components.]