market-scanner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs use of Perplexity tools (perplexity_ask, perplexity_reason, perplexity_search) to search and ingest public web sources and URLs for market size, trends, and citations, and then writes/uses those findings in research-memory/market-landscape.md to drive downstream decisions, so the agent will read and act on untrusted third-party content.