brainstorming

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's mandatory "Step 0: Search First" requires invoking search-first to check public third‑party sources (explicitly naming npm, PyPI, GitHub) and use those findings to shape which approaches are considered, so the agent will fetch and interpret untrusted, user‑generated web content that can materially influence its decisions.