competitor-teardown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow uses web search and extraction tools (tavily/search-assistant, tavily/extract, exa/search, and infsh/agent-browser) to actively search, fetch, and analyze third-party competitor websites, reviews, and search results.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references external CLI installation and cloud app execution commands via inference.sh (e.g., curl -fsSL https://cli.inference.sh | sh), which constitutes an unverified external runtime dependency.