alterlab-pra-csr-designer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly instructs the agent to "Search the web for current social impact data, cause marketing examples, SDG frameworks, and industry benchmarks" (SKILL.md — Workflow / Agentic Protocol), which means it fetches and reads untrusted public web content that can directly influence its decisions and outputs.