model-researcher

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The skill’s runtime workflow fetches outsider-authored free text from public web pages—specifically provider model pages on fal.ai/replicate and other sites (e.g., Reddit/AInVFX/fxguide)—via the fetch/web tools, which the agent then reads and summarizes into the LLM context.