School Selection

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow (see "3.1 Initial Search" and "3.2 Detailed Program Investigation" in SKILL.md) instructs the agent to use WebSearch to fetch and read open/public web pages (program sites, faculty profiles, funding info), and that content is then interpreted to drive recommendations, prioritization, and next actions, exposing the agent to untrusted third‑party content that could carry indirect prompt injection.