langgraph-functional

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly shows tasks that fetch external URLs (e.g., references/determinism-rules.md's fetch_external_data(url) -> requests.get(url).json()) and other examples call external APIs, meaning the agent ingests untrusted, user-provided web content as part of workflow.