deep-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow explicitly dispatches parallel sub-agents to “search + page fetch” open-web sources and then ingests extracted page snippets into the controller’s LLM context for synthesis/citation, which can include outsider-authored free text from arbitrary fetched URLs.