plan-with-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Execution Flow (references/execution-flow.md, Step 3 "Technical Research (WebSearch)") explicitly instructs the agent to perform WebSearch queries (e.g., "{{project type}} tech stack 2025"), so it will fetch and interpret open/public web content (untrusted third-party sources) as part of its workflow and that research can materially influence planning decisions.