web-reader

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill explicitly fetches and processes arbitrary public web pages (e.g., via zai.functions.invoke('page_reader') and CLI examples like z-ai function -n page_reader -a '{"url":"https://news.site.com/article"}'), so the agent ingests untrusted third-party web content that could contain indirect prompt injections.