automation-coordinator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). SKILL.md:70-108 and 271-333 define runtime steps that “扫描网站内容/监控 AI 引用/对比竞争对手” using a target URL (e.g., https://{{domain}}), which implies fetching and ingesting outsider-authored web page text into the agent’s LLM context for analysis/reporting (indirect prompt injection risk).