market-intelligence

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The skill’s runtime workflow explicitly uses Claude web_search to fetch “current market news” and “Reuters forex market analysis,” and then pipes the fetched page/text into sentiment/impact processing—i.e., outsider-authored public web content becomes LLM-readable context via the web_search results.