indication-dossier

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md requires using WebSearch/WebFetch (public web content) and MCP tools (e.g., ClinicalTrials.gov, PubMed) whose fetched page/PDF text is read and then summarized into waypoint JSON and the final report, so outsider-authored free text can enter the LLM context via the runtime web-fetch/search ingestion path.