pmf

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's required Stage 2 (Market Research) explicitly performs sequential web searches via Exa or WebSearch (calls such as mcp__exa__web_search_exa) to ingest public analogs/antilogs into market-research.md, and those search results are then read and synthesized (Stage 3 risk-prioritization / narrative-v2) to drive decisions, so it clearly consumes untrusted third‑party web content that can influence agent behavior.