citation-data-extractor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The SKILL.md explicitly states it processes "html_content: Raw HTML from inspection report" and "Processing raw HTML from CCLD inspection reports", so the agent ingests and interprets public third-party HTML (inspection reports) as part of its workflow, which could materially influence downstream actions.