app-marketing-context

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly directs the agent to "use get_app_detail" with an App Store ID to pre-fill downloads, ratings, reviews, and keywords from the public App Store (user-generated/public content), which the agent will read and use to populate the shared app-marketing-context that materially influences downstream recommendations.