news-digest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly lists the tools "websearch" and "webfetch" and a workflow step "Search recent sources," indicating it fetches and ingests open/public web content (news sites) that the agent will read and summarize, creating a clear avenue for untrusted third-party content to influence its outputs.