veo-build

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's references/source_code.md explicitly instructs the agent to "use web_fetch" to retrieve raw source files from the public URL base https://raw.githubusercontent.com/googleapis/python-genai/main/google/genai/, which is open/public third-party content the agent would fetch and read as part of its workflow.