alterlab-nmc-web-strategist

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to "Search the web" and "Research first: Search the web for current SEO best practices, Core Web Vitals benchmarks, content architecture patterns, UX writing guidelines, and competitor site structures" (Workflow / Agentic Protocol), which requires fetching and interpreting open/public third‑party content that will directly inform tool use and deliverables, exposing the agent to untrusted user-generated or public web content that could carry indirect prompt injections.