ds-idea

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly requires using web/open-web search and arXiv reading (e.g., "When tools allow it, actively use it", "use web search for paper discovery", and "use artifact.arxiv(paper_id=..., full_text=False)") so the agent will fetch and interpret public third‑party content that directly guides literature-survey decisions and downstream action selection.