ilya-sutskever-perspective

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill's SKILL.md explicitly requires using external tools ("⚠️ 必须使用工具（WebSearch等）获取真实信息，不可跳过" in Step 2) and includes a references/research/ directory with many public URLs (news sites, podcasts, Wikipedia, etc.), so the agent will fetch and interpret untrusted third‑party web content at runtime which can materially influence its actions.