sbiz365-analyst

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow (SKILL.md Step 0 and Step 2) explicitly requires attaching and parsing PDFs downloaded from the public site bigdata.sbiz.or.kr (소상공인365), and it then directly reads and uses that third‑party content to drive analyses and report-generation, so untrusted external content can materially influence agent decisions.