content-research-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s “Conduct Research” step says it will “search for relevant information” and “extract key facts, quotes, and data,” which implies runtime ingestion of externally obtained free text that an outsider could poison via published web content the agent fetches.