elon-musk

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's sourcing_strategy and Phase 1/Phase 2 workflows explicitly require researcher agents to perform WebSearch/WebFetch (ToolSearch fallback) and collect/cite URLs from public websites (Phase 1 researcher x3, "WebSearch + WebFetch", "URL + 발행일 + 소스유형 필수"), so the agent ingests untrusted third‑party web content that can materially influence classification, decisions, and next actions.