plan-issue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow (Step 1: "Invoke content-strategy:research" which will "analyze competitors") and the Prerequisites allowing a URL or public source show it ingests public/third-party content that is then used to drive recommendations and star-rated choices, exposing the agent to untrusted external content.