autoresearch-genealogy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly directs Claude Code autoresearch prompts (e.g., Step 3 and files like prompts/03-findagrave-sweep.md and prompts/11-immigration-search.md) to search and ingest public sites (FindAGrave, Ancestry, FamilySearch, Digitalarkivet, NARA, etc.) and then act on those findings to update the vault, so untrusted third‑party web content can materially influence agent actions.