evidence-based-giving

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly lists and directs using public sites (e.g., GivingWhatWeCan, GiveWell, Charity Navigator, GuideStar/Candid, ProPublica) as "External Sources" and instructs "Use these for data collection" and to "reference GiveWell" for evaluations, which indicates the agent is expected to ingest and interpret untrusted, user-facing third-party web content that can materially influence scoring and next actions.