topic-cluster-planning

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to "Google the seed topic" and "read the top 10 results, the People Also Ask, the 'Searches related to' at the bottom of the SERP, and 2-3 major publications" (Step 1), which requires ingesting untrusted, public web content whose instructions or text could influence planning decisions and tool use.