outreach-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md requires the agent to "research the prospect" via the required "research-prospect" process and to use third-party signals like a "recent post" or company/contact intelligence to personalize outreach, which implies fetching and interpreting untrusted public web/social content as part of the workflow.