family-history-planning

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly permits executing web searches and ingesting online records as part of research execution (SKILL.md and README instruct using web_search and linking to third‑party sites such as Ancestry, FamilySearch, Newspapers.com, and county/state pages), so the agent would fetch and read untrusted public web content during its workflow.