lead-hand-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Phase 3 and Phase 4 workflows in SKILL.md (and the HAND.toml tools/settings) explicitly require using web_search and web_fetch to ingest content from public sources such as company websites, LinkedIn, Crunchbase, job boards and social media, and that fetched untrusted third‑party content is parsed and used to enrich, score, and decide which leads to include—allowing indirect prompt injection via those sources.