nw-authoritative-sources

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md "Domain-Specific Search Strategies" explicitly directs the agent to query and ingest content from open public sources (e.g., site:stackoverflow.com, GitHub issues/discussions, arxiv.org, vendor advisories, cve.mitre.org) and uses those results to inform decisions and freshness rules, so untrusted third‑party content can directly influence agent behavior.