ai-elements

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill’s documentation (references/agent.md) explicitly includes tools like webSearch and readUrl that are intended to search the web and "read and parse content from a URL", meaning the agent can fetch and interpret arbitrary public URLs whose content could influence tool execution and decisions.