prospecting-revenue

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly scrapes prospect websites (pipeline-adapter.ts: Step 1 scrapeWebsite(url)), queries public search results via SerpAPI (researchCompetitors/searchProspectListing), and fetches Instagram follower data in the Engagement Bridge, all of which are untrusted public/user-generated sources that are read and used to generate proposals, follow-ups, classifications, and queue actions as described in SKILL.md—so third-party content can materially influence agent behavior.