student-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly mandates using the WebSearch tool to "联网搜索/联网确认最新考情" (see "第零步补充：联网确认最新考情" and multiple "必须使用 WebSearch 工具" statements in SKILL.md), meaning it will fetch and interpret open-web, potentially untrusted third‑party content and use those results to drive planning decisions.