plan-mode

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow (in "What You CAN Do" and the "Planning Process") explicitly instructs the agent to "Web search for documentation, best practices, examples" and to use those findings when researching approaches, so untrusted public web content will be read and can influence planning decisions.