recoup-research-the-web

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md describes open-web research tools (e.g., POST /research/web and POST /research/extract {urls, objective}) that at runtime fetch and read arbitrary third-party web pages/URLs, whose free text would be ingested into the agent’s LLM context as cited narrative/dossiers.