azure-ai-agents-persistent-dotnet

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly creates an agent with a BingGroundingToolDefinition and the instruction "Use Bing to answer questions about current events" (see "7. Bing Grounding"), which causes the agent to fetch and act on open/public web search results that are untrusted and can influence subsequent actions.