researchers-historical

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to research and gather sources from public web archives and news sites (e.g., https://archive.org/, https://www.newspapers.com/, https://www.loc.gov/, nytimes.com) as part of its required workflow, meaning the agent will fetch and read untrusted third‑party content that could contain instructions influencing its actions.