context-mode

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to fetch and index external web documentation and public APIs (e.g., "Fetching web documentation or HTML page? → Use ctx_fetch_and_index", Playwright/agent-browser examples, and the "Paginated API collection" GitHub issues fetch), meaning the agent will read untrusted, user-generated public web content that can be interpreted and drive subsequent actions.