Geek-skills-notion-infographic

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow (reference/subagent-prompt.md and reference/research-notes-format.md plus P1/P2 in SKILL.md) explicitly instructs child agents to perform web_search and web_fetch of external URLs and write public Source URLs into workspace/research-notes/*.md, which the Lead Agent must read and use to drive design and generation decisions—exposing the agent to untrusted, user-generated public web content that can materially influence subsequent actions.