qualification-scoring-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow (see Step 4 and the Reference Verification/Red Flags sections) explicitly requires pulling and acting on external third-party data — e.g., D&B/Experian reports, OFAC/SAM.gov sanctions checks, and public sources like industry directories and LinkedIn — which the agent must read and use to make qualification decisions, exposing it to untrusted public content that could carry indirect prompt-injection risk.