competitor-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow ingests competitor information (e.g., app metadata, screenshots/videos, ratings/reviews, keyword rankings) via ASO.dev surfaces like “App Info,” “App Clash,” “Spy,” and “Changelog,” which are outsider-authored public marketplace/app-store content and thus can include free-form text (e.g., review bodies, release notes) fed into the agent’s LLM context.