company-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires Phase 2 "信息收集" using web_search and web_fetch to gather and analyze open/public third‑party sources (e.g., 天眼查, 企查查, 百度新闻, Google News, 微博) and then uses that content to generate reports and risk ratings, meaning untrusted user‑generated or public web content is read and can materially influence agent decisions.