geo-compare

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Phase 2 workflow explicitly fetches homepages and up to 10 pages per user-provided competitor/public URL ("Fetch homepage, detect business type, extract brand name, collect pages (up to 10 per site)"), and it directly uses that untrusted third-party webpage content to compute scores and recommendations, so external pages could indirectly inject instructions that influence the agent's decisions.