press-release-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md workflow explicitly requires the agent to fetch and read public third-party content (e.g., "search for the 3 most recent press releases" in Phase 1.2 and "Read their last 5 articles" in Phase 7.2, plus guidance to check Twitter/X and Reddit), and to use those external items to shape headlines, angles, and pitches — which meets all criteria for ingesting untrusted web/user-generated content that can influence actions.