market-research-reports

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's workflow (SKILL.md, Phase 1 Step 2 and the "Data Sources" sections) explicitly instructs using the research-lookup tool to fetch market data from public third-party sources (market reports, government stats, company filings, news), which the agent must read and use to drive analyses and recommendations—exposing it to untrusted, user-generated/open-web content that can influence tool actions.