template-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). Yes — SKILL.md's mandatory Step 0 "Research-Synthesis" (and the "Research Gate" section) requires invoking WebSearch/Exa and WebFetch (e.g., arXiv/WebFetch) to pull open web/arXiv content before creating templates, so the agent will ingest untrusted third‑party pages whose instructions could materially influence template construction and subsequent actions.