research-proposal

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required Phase 2 "Literature Collection" explicitly instructs the agent to perform WebSearch and ingest content from open/public third‑party sources (e.g., web search results, arXiv, PubMed, SSRN, Google Scholar and general news/trends) and to read/synthesize that material into the proposal, which could allow untrusted third‑party content to influence subsequent actions.