ai-sdk-model-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly launches a "researcher" subagent that uses web search to gather official documentation and model details from public provider websites (e.g., provider docs links), meaning the agent will fetch and interpret open third‑party web content.