researcher-hand-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow uses web_search and web_fetch to retrieve and read arbitrary public web pages (outsider-authored free text) into the agent for synthesis/reporting, creating an indirect prompt-injection exposure path.