investor-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow (Steps 1–4) explicitly directs the agent to call Gooseworks proxy endpoints (e.g., /v1/investor-search, exa /search, /v1/people-search, /find-email) that ingest public investor profiles, portfolio pages, and contact information from open web sources, and those untrusted results are read and used to make outreach/decision actions—so third‑party content could indirectly inject instructions.