patent-search-cn-us

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's required workflow (SKILL.md, step "Run searches in public databases") instructs the agent to query and open results from public patent sites listed in references/patent-search-sites.md (e.g., Google Patents, CNIPA, Espacenet), meaning the agent will fetch and read untrusted third-party web content that can influence its search decisions and novelty assessments.