culture-judger

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md execution instructions (E — "收集信号/从外部可观察的信息" and the "从外部判断的方法" section) explicitly require the agent to gather and read untrusted public sources—e.g., founder public statements/social media, employee reviews, and supplier/customer口碑—which the agent is expected to interpret and use to drive the green/yellow/red diagnosis.