decomposing-project-tasks

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md Atomic Task Breakdown and task examples explicitly instruct the agent to "Search Google Scholar", "Read abstract of 10 papers, select 5 most relevant" and "Read full text of selected papers", which requires ingesting open/public third‑party web content (Google Scholar / external papers) that could materially influence subsequent decisions and tool use.