plant-care-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly instructs the agent to "Research the specific plant: Look up the exact species" and to "Recommend plant communities or forums", which clearly requires fetching and interpreting open/public, user-generated web content (forums/communities) that can materially influence the agent's care-plan decisions.