copycat-market-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s required workflow reads a user-supplied run.json/shortlist (“Read the current run.json, shortlist, selection…”) and also has steps that “search selectively” and “inspect… official pages,” which means outsider-authored free text can be submitted into the run inputs that the agent processes to decide what content to fetch.