schema-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required Step 0 "Research Synthesis" mandates invoking the research-synthesis flow and performing Exa/web searches and WebFetch calls (e.g., mcp__Exa__web_search_exa and WebFetch to arXiv) to ingest public web/arXiv content that the agent must read and use to guide schema decisions and follow-up actions, exposing it to untrusted third-party content that could carry indirect prompt injections.