idea-creator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill's Phase 1 explicitly performs WebSearch and reads abstracts/intros of recent papers (including arXiv and venue webpages) and then pastes that landscape map into the Phase 2 prompt to drive idea generation, meaning untrusted public web content is fetched and directly influences the agent's decisions and tool use.