market-research-reports

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Phase 1 "Research & Data Gathering" (Step 2) explicitly requires using the research-lookup tool (e.g., python skills/research-lookup/scripts/research_lookup.py) to fetch market data from public third‑party sources like Gartner/Forrester reports, government statistics, and company filings, which the agent is expected to read and use to drive analysis and recommendations—exposing it to untrusted external content that can influence next actions.