michael-d1-recruiting-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs the agent to fetch and interpret public SwimCloud data (e.g., https://www.swimcloud.com/swimmer/3250085 and the "Get latest times from SwimCloud" pseudocode for rivals and meet results), which is third-party, user-posted content the agent would read as part of its workflow.