inamori-perspective

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires using tools like "WebSearch等" in Step 2 to fetch real-time information from external/public sources as part of its mandatory research workflow, meaning the agent will read and act on untrusted third‑party web content (SKILL.md, "必须使用工具（WebSearch等）获取真实信息，不可跳过").