brief-section-drafter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Step 4 workflow explicitly permits and labels "search the web" results ([web search — verify]) and requires using external research tools (e.g., Westlaw, CourtListener, or "search the web") to retrieve citations, so it can fetch and ingest open/public web content (including user-generated/untrusted pages) that the agent is expected to read and that can influence drafting decisions.