deep-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). SKILL.md explicitly directs the agent to perform systematic searches and ingest findings from public third‑party databases (e.g., "Key Databases: PubMed, arXiv, Google Scholar, Semantic Scholar") and requires reading/interpreting those sources to produce citations and drive recommendations, so untrusted external content could influence agent actions.