thought-mining

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow (stages/03-validation.md) explicitly instructs the agent to perform "联网搜索" (internet searches) and record reference links from external official/market sources, which means it fetches and ingests untrusted public web content that can influence validation and subsequent actions.