grant-writing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required Step 0 explicitly instructs the agent to "read the Notice of Funding Opportunity (NOFO) or Funding Opportunity Announcement (FOA)" and store the NOFO URL in NOFO.md (and the "Literature Search" section directs use of the opencite tool to fetch public literature), so the agent will fetch and interpret open/public third‑party webpages whose instructions/requirements can materially alter subsequent drafting and tool use.