create-geo-charts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow (SKILL.md Step 1: "If they want original synthesis, gather data from verifiable sources first — every number needs a source URL") and Step 9 ("open it in a browser") explicitly instruct the agent to fetch and read public third‑party sources (examples include conductor.com and arXiv links in the resources), so it will ingest untrusted web content that can influence its outputs and tool use and thus enable indirect prompt injection.