thought-based-reasoning

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's ReAct section explicitly instructs the agent to perform web searches and lookups (e.g., "Search[Colorado orogeny]" / "Search[High Plains]") and to ingest those observation results, which clearly exposes the agent to untrusted public third-party content.