agency-pr-communications-manager

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The skill’s runtime workflow includes “Research target journalists — read their work” and “Monitor media and social mentions in real time,” which typically requires fetching/ingesting outsider-authored web/social text into the agent’s LLM context via browser/social/news content.