deep-researcher-sequential-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow includes “Execute … retrieve results” from web/user-provided sources and then “record … raw facts, numbers, quotes, and source URLs collected during search” into the Global Research Context, which the LLM later synthesizes—so any outsider-authored web page/article text fetched at runtime can become LLM-readable free text in the GRC via the search/retrieval → GRC ingestion → report synthesis path.