alterlab-cdm-preproduction

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly instructs the agent to "search the web" and "research first" (Workflow step 1 and Agentic Protocol) to fetch shot-list templates, storyboard references, and best-practice content from public websites, which the agent must read and use to influence planning and deliverables, exposing it to untrusted third-party content.