keyword-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to perform web searches and ingest public third‑party content (e.g., "Incremental Discovery — Multi-platform search: Reddit, Quora, X (Twitter), Hacker News" and "Report Workflow — Enrich — Web search, visit competitor/product pages"), which are untrusted/user-generated sources the agent is expected to read and that can materially influence its decisions.