company-funding-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow calls Orthogonal’s Nyne/Fiber endpoints with user-supplied query parameters (e.g., company_name, company_domain, and especially Fiber’s natural-language query), and that free-form text is then sent into the agent/LLM context via the skill’s API-driven results generation; this is outsider-authored content because it originates from the operating user’s prompt rather than the skill’s bundled reference material.