comprehensive-research-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly mandates web research using "search, read_url, or fetch operations" and instructs ranking and reading third‑party URLs (e.g., "Before reading URLs, rank search results" and "When to Activate: Task involves web research with search, read_url, or fetch operations"), which means the agent will ingest and act on untrusted public web content that can influence subsequent tool use and decisions.