financial-marketing-compliance-review

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). SKILL.md/refs indicate the skill can take promoPageLink (public URL) and/or uploaded marketing text/files; at runtime the skill likely fetches/reads that outsider-authored page/content and injects it into the LLM context for review, which is an indirect prompt-injection exposure path.