aso

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly requires the agent to use WebFetch to retrieve and screenshot live App Store/Google Play listing pages in Phase 1 ("Fetch the listing" / "Use WebFetch") and to fetch competitor URLs in Phase 3, meaning it ingests arbitrary public third-party pages (apps.apple.com / play.google.com or searched web results) whose content the agent must read and which materially influence scoring and next actions.