superforecaster

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to search and ingest public third‑party sources—notably prediction markets (Polymarket, Metaculus, Manifold) and web searches for expert forecasts/news/base rates—and to use those market prices and external evidence to set priors and drive forecasts, which clearly exposes the agent to untrusted, user-generated web content that can influence its actions.