Writing SOP

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Phase 1 Material Supplementation Loop explicitly instructs the agent to "Trigger search-sop — use web_search or academic search tools" and to add papers via library_add_paper/library_import_bibtex, so the agent fetches and ingests open/public third‑party content (web pages/papers) that it is expected to read and that can influence subsequent drafting and tool actions.