spec

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's routing-discovery.md explicitly requires handling OOBIs by querying untrusted URLs for proofs (e.g., "Query URL for proof" in the OOBI Verification Algorithm) and then verifying those replies to decide whether to accept endpoints, meaning the agent fetches and interprets public third-party content that can change its actions.