ccc-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's instructions (e.g., deep-research step 3, literature-review step 2, trend-analysis step 3, and competitive-analysis tips) explicitly direct the agent to fetch and ingest open/public sources and user-generated content (web searches, GitHub, Reddit/Discord/X/Twitter, forums), which the agent is expected to read and synthesize into recommendations, so untrusted third‑party text can materially influence its actions.