paid-channel-prioritizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). SKILL.md Phase 1B ("Competitor Ad Presence Research") explicitly instructs the agent to run web_searches (and the skill requires web_search/google-ad-scraper) against public ad libraries (e.g., facebook.com/ads/library and adstransparency.google.com) to ingest competitor ads — untrusted third‑party content that the agent must read and that directly influences channel scoring and recommendations.