funnel-planner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Baseline Collector (agents/baseline-collector-agent.md and the SKILL.md "WebSearch for Missing Baselines" / "When the user lacks data" sections) explicitly instructs the agent to perform web searches and ingest industry benchmarks from public websites, and those externally-sourced baselines are used to set targets that materially drive downstream decisions—so it consumes untrusted third-party content that could carry indirect prompt injection.