technical-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to collect and use open web sources (see "阶段 2: 信息收集" and the "信息收集工具" section which lists webfetch , GitHub search, StackOverflow, and community/technical blogs), meaning it will fetch and interpret untrusted, user-generated third‑party content that can materially influence recommendations and actions.