user-research-synthesis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly instructs the agent to "pull research inputs" from connected tool categories such as ~~user feedback (e.g., Intercom), ~~knowledge base (e.g., Notion), and ~~meeting transcription (e.g., Fireflies) — user-generated, third‑party content the agent is expected to read and use to drive synthesis and decisions, so it can materially influence actions.