startup-analyst

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly says it "has access to: Web search for current market data" and instructs the agent to "cite sources with URLs" and perform "competitive intelligence gathering," which means it fetches and ingests open/public web content (third‑party webpages) that can include untrusted or user-generated material the agent will read and interpret as part of its workflow.