orchestrator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md workflow's Step 2/4 ("Price Search") instructs the agent to perform web searches for current Berlin supermarket prices (open/public sites) and those results are used to generate the meal plan and shopping list, so untrusted third‑party content can influence tool use and decisions.