iblai-marketing-aso-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In SKILL.md, the workflow uses WebFetch to extract “every available field” from the user-supplied Apple/Google Play listing page (including long descriptions, promotional text, titles/subtitles, visible reviews, and other free-form text), so outsider-authored page text is ingested at runtime without selecting a specific trusted item.