hiring-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly requires external legal research and citation (e.g., use of "yuandian检索", options for "联网检索——需复核", and repeated "研究/引用一手来源" instructions), which causes the agent to fetch and interpret open/public third‑party web content that can materially change its recommendations.