pressreleasesonline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly accepts an arbitrary public website URL (see "Accepts a URL and optional notes" and the curl Usage example) and uses AI to draft a press release from that site's content, so the agent will fetch and interpret untrusted third‑party web pages that could contain injected instructions.