community-discovery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly instructs the agent to search and ingest content from public, user-generated sources (e.g., Reddit subreddits, Slofile/Slack directories, Disboard/Discord servers, Google searches) and to use that information (links, key threads/channels, rules) to drive engagement strategy and next actions, which exposes the agent to untrusted third-party content that could contain indirect prompt injections.