discover-remote-friendly

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's Procedure step 3 explicitly fetches and interprets live job postings, company careers pages, and public statements (e.g., LinkedIn, blogs, YC profiles) from open/public third-party sites, which the agent uses to classify companies and drive its outputs, exposing it to untrusted user-generated web content that could carry indirect prompt-injection vectors.