structured-research-workflow

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly tells the agent to "Search broadly first," "Read deeply," and "Cite — Record source URL/DOI at time of reading," which requires fetching and interpreting public third‑party web sources whose content can directly influence synthesis and next actions.