master

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly tells the agent to "Read the reference document" and to "Find the source link in the reference doc (e.g., a file path, URL, or section reference)" and states "Claude reads the source to verify" (also referencing podcast transcripts and newsletter articles), which means the agent will ingest external, potentially untrusted/public third‑party content and act on it for scoring and next actions.