nature-data

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The skill's Source hierarchy and SKILL.md explicitly instruct the agent to verify current journal pages and use external journal/repository policy pages (e.g., "If a policy detail may have changed, verify the current journal page before giving final submission advice" and the Source Basis references listing public Springer Nature/Nature URLs), which requires fetching and interpreting open/public third‑party web content that can change the agent's recommendations.