customer-discovery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly fetches and scrapes public, untrusted third‑party content (see SKILL.md Step 3: WebSearch of LinkedIn/Twitter/Reddit/G2/YouTube/etc.) and includes scripts (scrape_website_logos.py, scrape_wayback_logos.py, search_builtwith.py) that download and parse those pages, and that parsed content is used to drive deduplication, confidence scoring, and report generation—so external page content can materially influence agent actions.