pr-press-release

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's references/media-database.md explicitly instructs building the journalist database by searching Google News, visiting competitor press releases and journalists' article pages (public websites) and adding article URLs/notes, meaning the agent is expected to fetch and interpret open third‑party content to decide who to pitch and how to act.