feynman-perspective

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). SKILL.md Step 2 explicitly mandates using tools like "WebSearch" to fetch real information ("⚠️ 必须使用工具（WebSearch等）获取真实信息，不可跳过"), so the agent will ingest open/public third‑party content as part of its required research workflow, which can materially influence subsequent actions and responses.