research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's Information Gathering phase explicitly instructs using web searches (preferencing a gemini web search command and a WebSearch fallback) and a docs-seeker for GitHub repos, meaning the agent will fetch and read arbitrary public web pages and user-generated GitHub content as part of its workflow.