superseller-content-factory

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly pulls third-party competitor content and web scrapes in Stage 1 ("Pull content_competitors for tenant + recent Apify scrape if available (<7d old)") and ingests social media references (IG shortcodes in pillar source_refs) which the agent must read and synthesize into the content brief/plan that drives generation decisions, creating a clear vector for indirect prompt injection.