lead-discovery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to "scrape the website (homepage, pricing page, about page, docs if available)" and to "search the web" for competitors, GitHub repos, subreddits and HN threads, which are open/public third‑party sources whose untrusted/user‑generated content the agent must read and use to build the shared context and decide/reroute downstream actions.