research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly instructs the agent to perform web searches (Phase 2) and to gather and analyze user-generated content from public sources—app store reviews, GitHub issues, Reddit/forums, Twitter/X, and HackerNews (Phase 3)—and to use those findings to drive feature prioritization and roadmap decisions, which clearly exposes it to untrusted third-party content that can influence agent actions.