research-metrics

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs using WebSearch/WebFetch to collect and interpret metrics from public third-party sources such as Google Scholar profiles, Semantic Scholar, OpenAlex, researchmap and KAKEN—all untrusted/user-generated or public web content—which the agent is expected to read and use to drive analysis and report-generation.