citation-graph-ingest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow reads ingested corpus documents and references via gbrain tools (search, get_page, get), which contain third-party text, but the skill explicitly defines these as untrusted data rather than direct automated monitoring/inbound feeds.