pr-crisis-communication

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md and references/social-crisis.md explicitly instruct monitoring and searching public social media and user posts (e.g., "搜索 [品牌名] + 相關關鍵詞", "主動回應原貼文留言", "截圖保存原始來源"), meaning the agent would ingest untrusted, user-generated third‑party content and let it drive response decisions.