fund-literature-review-writer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). 该技能在 Step 4/4c-4d 通过 Exa Search（search/scripts/exa_search.py）和 Google Scholar（search/scripts/search_google_scholar.py）运行时会把“网页/搜索结果的可读文本（highlights/text/abstract）”作为 abstract 等字段进入后续合并与LLM生成上下文，属于外部网页内容/第三方作者文本的间接提示注入风险。