technology-mapping

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly performs live queries of public third‑party sources (SKILL.md search workflow: tavily-search → search_web; Phase 1/2 use of OpenAlex, news/interviews, university websites) and uses scripts/wikidata_client.py to query the public Wikidata SPARQL endpoint—these untrusted web sources are ingested and directly drive provenance decisions, graph edges, and downstream actions, creating clear opportunity for indirect prompt injection.