job-application

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Required Inputs explicitly ask the user to "paste in full" a job description (and Part 1 requires analyzing that JD), meaning the agent will ingest and act on arbitrary public/third‑party job postings which could contain untrusted/user-generated content that influences its outputs.