sponsored-newsletter-finder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's Phase 1 "Discovery via Web Search" requires using the web_search tool to fetch and ingest content from public newsletter sites and directories (e.g., substack.com, beehiiv.com, newsletter.directory, paved.com/paved.com, swapstack.co) and then interprets subscriber counts, open rates, sponsorship pages, and past-sponsor information to drive scoring and outreach decisions, which are untrusted third-party sources that can materially influence agent actions.