continuous-learning-v2

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's import command (scripts/instinct-cli.py -> cmd_import) explicitly fetches content from arbitrary http(s) URLs via urllib.request.urlopen and then parses and imports those instincts into project/global instinct stores, meaning untrusted third-party web content can be ingested and materially influence agent behavior.