snowball

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow includes web-search and web-research (SKILL.md:39-44), which at runtime can fetch public web pages and ingest their readable text into the agent context (public web content category → web-browsing path), creating an indirect prompt-injection risk.