research-brief-action-engine

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's SKILL.md explicitly directs the agent to "review batches of links, videos, articles, transcripts, market scans, or trend dumps" and to extract and act on their content (Workflow/description), meaning it ingests untrusted public third‑party material that can influence recommendations and next actions.