resume-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly requires a "target job description — pasted text or a link" (see "What you need before you start") and instructs the agent to read and use that JD for keyword matching and scoring (see "Map to the JD — the 70/30 check"), so the agent will ingest arbitrary public job-posting URLs or pasted third-party content that can materially influence its decisions.