kata-research-phase

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). This skill's phase-researcher instructions explicitly require using WebSearch and WebFetch of public sites (see references/phase-researcher-instructions.md "WebSearch: Ecosystem Discovery" and "Official Docs via WebFetch") to ingest community and web content that is then interpreted to produce RESEARCH.md which directly drives planner actions, exposing the agent to untrusted third‑party content that could carry indirect prompt injection.