deep-research-glim

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Source text is ingested from outsider-authored free web/social/code content because the workflow uses glim web search/crawl and deep-crawls specific sources from the user-supplied topic (including GitHub, Reddit, Twitter/X, etc.) and then performs full-content extraction in Stage 2.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly requires and calls a configured glim MCP server (https://glim.sh) at runtime to perform web/GitHub/Reddit/YouTube fetches whose content is injected into the agent/subagents and therefore can directly control prompts and agent behavior.