ai-tech-fulltext-fetch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's runtime (scripts/fulltext_fetch.py) calls fetch_html which uses urllib.request.urlopen to fetch and extract HTML from arbitrary entry URLs pulled from the public entries table (see SKILL.md and references/fetch-rules.md), so it clearly ingests untrusted third-party web pages whose content can later influence indexing, summarization, or agent decisions.