write-article

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Step 2 "Research" explicitly instructs the agent to perform web searches, collect 10–20 sources with URLs from the open web, and extract data/quotes into a research file—meaning the agent will fetch and read public third-party content (arbitrary URLs) as part of its workflow.