deep-survey

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). SKILL.md defines the required SOPs (e.g., web-search/web-research) that invoke web-browsing tasks and require fetching/reading public web pages at runtime (“web-search → web-browsing/skills/web-search/SKILL.md”), which typically ingests outsider-authored free-form web text into the LLM context.