studio-define-customer-persona

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to read local files in the app repo (Product Offer and template) and use web search/research tools to investigate target markets, which involves low-risk active searching/fetching rather than automatic ingestion of untrusted outsider-authored feeds.