funding-signal-outreach

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly calls for "Web search" in Step 1 (including building queries and recording source_url for funding announcements) and uses web-based contact-finding in Step 3 (e.g., site:linkedin.com/in, LinkedIn, Clearbit, Apollo or other web search) to ingest public third‑party content (news, press releases, LinkedIn profiles) which the agent must read and use to qualify companies, pick contacts, and draft outreach, so untrusted content can materially influence behavior.