research-assistant

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's Research Protocol (Phase 2: "Search & Collect") and Topic Monitoring / Automated Research Triggers sections in SKILL.md explicitly instruct the agent to run web searches, fetch and synthesize content from public sources including "community discussion" and saved search queries, and then act on those findings (create briefs, trigger actions), which exposes the agent to untrusted third‑party content that can influence decisions.