brainstorming

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs using web_search during exploration and includes workflows like "Search for each competitor's features" (Example 2), which requires fetching and parsing public third‑party webpages whose untrusted content can influence the agent's decisions.