us-startup-hiring-coach

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow in SKILL.md explicitly instructs the agent to "Find actual job postings → extract what they need" and to build target lists from/public sources like Y Combinator, Product Hunt, AngelList, and LinkedIn and "research" companies (e.g., Product Hunt, Twitter) to craft personalized outreach, which requires ingesting untrusted public, user-generated content that can directly change the agent's actions and messaging.