lead-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly directs the agent to search and synthesize open/public third‑party sources (e.g., LinkedIn, job boards, BuiltWith/Wappalyzer, Crunchbase, G2, press releases, Glassdoor) as part of its research workflow, meaning untrusted external content is ingested and can materially influence tiers, contact selection, and outreach actions.