hymy-perspective

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md agentic workflow explicitly requires using external tools to "做功课/必须用工具搜索" for fact-based questions (see "Step 2: ⚠️ 遇到需要事实的问题，必须用工具搜索" and mentions of using Gemini/Claude to read papers), which clearly instructs the agent to fetch and interpret open/public third‑party content that can materially influence its decisions.