buy-side-equity-research-memo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md specifies using SEC filings, earnings call transcripts, IR materials, exchange/regulatory announcements, and other third-party sources (runtime retrieval/ingestion of outsiders’ document text), which can be attacker-controlled free text via indirect prompt injection, even though the workflow is “source disciplined.”