sales-account-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly states the tool "ALWAYS (works standalone via web search)" and "I'll run web searches immediately," pulling content from public sites (news, LinkedIn, company websites) which the agent ingests and uses to generate outreach advice, so untrusted third‑party content can influence its behavior.