youzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly directs the agent to query the Youzer social platform (e.g., via "membrane action list" and "membrane request CONNECTION_ID /path/to/endpoint") which fetches user-generated posts, comments, forums and other public content from a third-party site that the agent is expected to read and could materially influence subsequent actions.