product-spec-builder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md repeatedly mandates performing real-time web searches ("先上网搜索", "不上网搜索就不回答") in the "实时上网搜索策略" and multiple workflow steps, which requires fetching and interpreting open/public third-party content that can directly influence the agent's questions, decisions, and generated Product Spec—exposing it to potential indirect prompt injection.