ln-001-standards-researcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow (Phase 2/3 in SKILL.md) explicitly calls mcp__Ref__ref_search_documentation and a WebSearch fallback to fetch public documentation and URLs (and the research_guidelines.md even discusses using Stack Overflow/blog posts as sources), which are untrusted third‑party web content that the agent reads and uses to drive recommendations, file creation, and next actions—enabling indirect prompt injection.