gap-surfacer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill ingests and surfaces third-party regulatory content produced by upstream agents (policy-diff and reg-feed-watcher) — e.g., entries and links in references/gap-tracker.yaml and references/comment-tracker.yaml (Federal Register URLs, “[web search — verify]” tags) — and uses those citations/dates to classify gaps and drive notifications/closures, which clearly exposes the agent to untrusted external content that can influence actions.