page-cro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly says to handle cases where "the user just shares a URL and asks for feedback" (page-cro SKILL.md) and the evals include an example URL (https://example.com/product), indicating the agent is expected to fetch/interpret open/public web pages (third-party content) and let that content drive CRO decisions.