draft-outreach

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires an initial "Web search (default)" in Step 2 / "research-prospect" to ingest public web content (news, posts, company pages) and uses those untrusted third‑party findings as the mandatory basis for choosing personalization hooks and drafting outreach, so external web content can materially influence the agent's decisions and outputs.