funnel-planner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The baseline-collector-agent explicitly instructs the agent to perform WebSearch for missing baselines (see "WebSearch for Missing Baselines" in agents/baseline-collector-agent.md) and those public benchmark pages are ingested and used by target-setter and downstream agents to make decisions, so the skill clearly consumes untrusted third‑party web content that can influence tool actions.