skillkit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md workflow explicitly requires web searches for research (see "Web search for domain research (3-5 queries)" in the v1.0.0 notes and Section 2 "Research and proposals"), and the Technical Architecture notes support a web_search tool for fetching public pages, so the agent will ingest untrusted public web content as part of its required research step.