market-research-reports

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Phase 1 research workflow explicitly calls the research-lookup tool (e.g., python skills/research-lookup/scripts/research_lookup.py) to fetch market research reports, news, government statistics and company filings from public third-party websites, which the agent is expected to ingest and interpret as part of its analysis—exposing it to untrusted external content that could carry indirect prompt injections.