resume-cover-letter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires ingesting a job listing or URL and instructs the agent to "extract the key requirements" and to "read the job listing and company website" (see "Before You Start" and "Cover Letter" sections), which are untrusted public third‑party sources that can directly change the agent's output and actions.