pitch-screener

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md "Step 2: Background research" explicitly requires running web searches ("Use whatever web search tool is available") and incorporating those public, user-generated/untrusted search results into the investment memo, so the agent ingests and acts on third‑party web content that could contain indirect prompt injections.