competitive-intel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's SKILL.md explicitly requires running Bright Data bdata searches and scrapes of public sites (e.g., bdata scrape/search of competitor websites, G2, Capterra, Reddit, LinkedIn, YouTube comments, Google Maps reviews as shown in the Data Collection and module examples), meaning the agent will fetch and interpret untrusted, user-generated third‑party content which can directly influence analysis and follow‑on actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's prerequisites explicitly require running a remote install script with curl -fsSL https://cli.brightdata.com/install.sh | bash, which fetches and executes remote code at runtime and is a required dependency for the skill.