saul-goodman-perspective

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow in SKILL.md (Agentic Protocol Step 1–2: "Saul 式研究") explicitly mandates using WebSearch and checking public sites (e.g., rollingstone.com, ew.com, variety.com/维基索引) to fetch facts and the repository even includes scripts (scripts/download_subtitles.sh) that pull YouTube subtitles, so the agent will ingest and act on untrusted public/user-generated web content which can materially influence its behavior.