money-review-skeptic

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly requires performing a "Recent web search" ("What to load" bullet 4 and the Principles' "Web-search when relevant"), meaning the agent will fetch and read public third‑party web content (competitor moves, regulatory changes, etc.) which is untrusted and can materially influence decisions.