collecting-intelligence

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's Task 6–9 explicitly instruct the agent to read and synthesize content from public third‑party sources (e.g., competitor landing pages, Meta Ads Library, Google Ads Transparency Center, G2/Capterra, Reddit, app store reviews, competitor newsletters and free trials), meaning the agent will fetch and interpret untrusted, user-generated or public web content as part of its workflow.