triz

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md workflow explicitly directs the agent to "map to adjacent fields using Semantic Scholar's field taxonomy" and to "search for solved analogues in those fields," which requires fetching and interpreting public third-party (academic/web) content that could carry untrusted instructions influencing its analysis and actions.