competitive-ads-extractor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s required workflow ingests competitor ad copy by scraping Facebook Ad Library and other ad libraries based on a competitor search (e.g., “Accessing Facebook Ad Library... Searching for: Notion; Extracting...”), so outsider-submitted poison is possible via the ad content submitted by arbitrary third parties.