research-add-fields

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). Option B (“Web search”) launches a general-purpose research subagent via the Task tool, which can fetch public web content at runtime and feed its extracted free text back into the agent’s LLM context as proposed field candidates.