family-menu

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md Research Phase explicitly instructs the agent to "Use web search to gather information" — e.g., searching public websites for seasonal ingredients, high-protein recipes, and restaurants near zip code 20136 — which requires ingesting untrusted, user-generated/open-web content that will influence planning and selections.