product-product-researcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly requires "用户评价分析" and lists "数据收集
• 应用商店、社交媒体、论坛", indicating it fetches and ingests untrusted, user-generated content from public sites that the agent will read and use to drive analysis and recommendations.