korean-scholarship-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md workflow and references (e.g., "Prerequisites" requiring "최신 웹 검색 가능", "Workflow" search steps and source-patterns.md with queries like site:*.ac.kr and site:kosaf.go.kr, and school-discovery.md which says "첨부 PDF/HWP가 있으면 같이 열어 본다") require the agent to fetch and read open/public third‑party webpages, notices, and attachments (including blogs/communities as lead sources), which the agent will parse and use to make eligibility/filtering decisions—exposing it to untrusted third‑party content that could carry indirect prompt injection.