business-decomposition-order-quality

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's workflow explicitly requires collecting and interpreting public third-party sources (e.g., "Collect all major order announcements and recent reports" in SKILL.md and the idc-order-ledger-guide which cites public sites like https://www.cninfo.com.cn, b2b.10086.cn, caigou.chinatelecom.com.cn and local government/project websites), meaning the agent will ingest untrusted external content that can materially influence its analysis and actions.