clickhouse-best-practices

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md "How to Apply This Skill" explicitly instructs the agent to "If uncertain: Use web search for current best practices" and to "Always cite your source" (including URLs), which requires fetching and interpreting open/public web pages that may be untrusted and could materially influence decisions, enabling indirect prompt injection.