press-release-writing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Yes — SKILL.md's Quick Start and Research & Fact-Checking sections explicitly instruct using the inference.sh CLI (belt) to run tavily/search-assistant and exa/search/exa/answer queries that fetch and ingest public web/search results for fact-checking and context, meaning untrusted third‑party content is read and used to influence the press‑release drafting workflow.