alterlab-pra-media-planner

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md Workflow and Agentic Protocol explicitly instruct the agent to "search the web for current media rate cards, platform audience data, CPM benchmarks, and competitive media spend reports", so the agent will fetch and ingest untrusted public web content that can materially influence planning decisions and actions.