content-research-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Research Phase explicitly instructs the agent to "Use web search to find recent, relevant sources" and to incorporate community examples, case studies, and developer testimonials, which requires fetching and reading open/public third‑party content (web pages, news, forums/social media) as part of its workflow and therefore exposes the agent to untrusted, user-generated content.