research-and-write

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime path is Phase 1 “Research,” which uses the deep-research MCP server to fetch and compile web research into outputs/{slug}/research.md, and that outsider-authored web page text is then read/used in Phase 2 by linkedin-writer to generate the post (indirect prompt injection risk via public web content).