find-portfolio-companies

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md shows the runtime path calls the first-party connector peopleDataLabs via cargo-ai orchestration action execute with a user-provided SQL query string to fetch company records, meaning outsider-authored free text (the “query”/investor name) is ingested to form a backend query before any specific item selection.