lead-research-assistant

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to search and ingest public web sources—company websites, job postings, LinkedIn profiles, GitHub repos, and recent news—to identify and analyze leads, so it consumes untrusted third-party/user-generated content as part of its workflow.