brand-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Phase 3 "Competitor Research" Step 2 explicitly requires the agent to use WebSearch and WebFetch to read public competitor homepages and marketing pages and then synthesize those findings to drive design choices, so untrusted third-party content from arbitrary websites is ingested and can materially influence tool use and next actions.