learning-design-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's Step 1 "Gather the Content" explicitly accepts a "URL
• link to a publicly accessible course page or lesson," meaning the agent may fetch and analyze arbitrary public web pages (untrusted third-party content) as part of its workflow.