market-news-analyst

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md (Step 1: "News Collection via WebSearch/WebFetch" and multiple lines like "Use WebSearch and WebFetch tools to collect news automatically" and the listed public sources such as Bloomberg, Reuters, WSJ) explicitly instructs the agent to fetch and ingest open/public third‑party news webpages which it must read and use to drive analysis and decisions, creating a clear vector for indirect prompt injection.