munger

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the Moat Analyst to "Use WebSearch and WebFetch to research the actual market" (Phase 2, Teammate 5) and requires returning sources/URLs and factual findings that feed into the team's synthesis, so the agent will fetch and interpret arbitrary public web content that can materially change decisions.