character-reference-sheet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly calls a search_web tool and instructs performing web searches to fetch setting/lore details from public web pages when a character is recognized, which exposes the agent to untrusted third-party content that it will read and use in its workflow.