comp-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md Data Sources section explicitly instructs the agent to "use web research, public salary data, and user-provided context" and to cite "Web research" as sources, which means the skill will fetch and interpret open/public third-party content (e.g., public salary sites) that can materially influence compensation decisions.