ark-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly instructs the agent to perform web searches and to clone and examine public GitHub repositories (e.g., git clone https://github.com/owner/repo.git) and to ingest blog posts, tutorials, and user-provided/pasted content, which are untrusted third‑party sources the agent would read and interpret.