sgrna-design-guide

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to download and parse public CRISPick datasets (Step 3: "Download and decompress the .txt.gz file" from CRISPick/Broad Institute) and to search Addgene and PubMed for validated sgRNAs (Step 2), which are untrusted, user-generated or public third‑party sources whose contents the agent is expected to read and act on during the workflow.