cs-marketing-offer-creation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the runtime workflow reads free-form text from Facebook Ad Library—specifically it parses document.body.innerText (and also extracts destination URLs from the DOM) after driving the browser to facebook.com/ads/library with attacker-controlled query terms—so outsider-authored ad/search results can be ingested before selecting a specific item.