investor-brief-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly instructs researching and using investor data from public sites (AngelList, Crunchbase, LinkedIn, fund websites) that the agent would read and interpret to build/personalize outreach, exposing it to untrusted third-party content that could enable indirect prompt injection.