recency-guard

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's subagent specs (./subagents/recency-checker.md and ./subagents/claim-verifier.md) explicitly instruct searching and gathering evidence from the web/public sources and returning source-backed revisions, so the agent will ingest and act on arbitrary third-party web content that could contain injected instructions.