audience-belief-mapper

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill instructs the agent to read customer reviews, comments, and scraped page text as evidence, which can be authored by outsiders, but the agent actively searches or fetches specific content rather than monitoring an automatic queue.