product-strategy

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md "Research-First Workflow" explicitly requires using web search to find and cite public web sources (industry blogs, analyst reports, competitor intel) and to ingest those third-party pages as part of the workflow, which exposes the agent to untrusted public content that could carry indirect prompt injection.