pm-case-study

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's "Research-First Workflow (CRITICAL)" explicitly requires doing "10-15 web searches" and to "cite everything" with inline linked sources/URLs, meaning the agent must fetch and interpret open/public third‑party web content (company blogs, interviews, analyst reports, etc.) that can materially influence its analysis.