vp-retro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The subagent Research step in references/subagent-guide.md explicitly instructs the agent to "Search community for related skills, tools, or known solutions," which requires fetching and interpreting public/community (untrusted) content as part of the workflow and could influence subsequent recommendations.