lead-research-assistant-cn

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow includes “Search for companies matching the criteria” and “Look for signals of need (job postings, tech stack, recent news)” which typically requires fetching/reading public web content or other outsiders’ text (e.g., scraped company pages/news/job posts) and then feeding that readable text into the agent’s LLM context for lead qualification.