analise-semiotica

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires web research—the persona line "Você sempre faz uma pesquisa na internet..." and task step 6 ("Utilize a tool [google_search] to pesquisar na web links úteis") forces the agent to fetch and interpret open public web content (search results/links), which are untrusted third‑party sources that can influence its outputs and actions.