competitive-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow relies on external search dependencies (effective-web-research) and instructions to research competitor products via web searches and runtime forensics, but does not autonomously ingest unselected outsider-authored free text streams like email or support tickets.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references FuDesign2008/open-skills via an npx command in SKILL.md line 14 to install a required dependency at runtime, but this repository locator is an unofficial third-party source, making it a high-tier unverifiable external dependency.