tw-edu-worksheet-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md (under "MCP 整合更新 (v3.0)" / "MCP 連接器") explicitly states WebSearch is "自動啟用" to search latest課綱資料、教材資源、時事素材, which means the agent will fetch and ingest open/public web content (untrusted third‑party sources) and use those results to influence worksheet generation—creating a clear avenue for indirect prompt injection.