pp-visit-detroit-blog

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md directs runtime use of an installed third-party CLI that “sync/search” pulls Detroit blog article content into a local store and emits it as JSON via --agent; that article text is outsider-authored web content then gets read by the agent through the CLI’s stdout output (even if not shown verbatim in SKILL.md itself).