battlecard-generator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md Phase 1 research steps explicitly instruct the agent to fetch and search public competitor homepages, pricing pages, review sites (site:g2.com, capterra), ad sources, and social/community sites (reddit, twitter) and the Tools Required lists web_search, fetch_webpage, review-site-scraper and google-ad-scraper, so the agent will ingest untrusted, user-generated third‑party content that can materially influence its analysis and actions.