lead-research-assistant-cn

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow for “Research and Identify Leads” requires searching for companies and using signals like “recent news,” “job postings,” and “technology stack,” which typically involves fetching/reading public web pages or scraped content authored by outsiders and then feeding that readable text into the agent’s LLM context.