ad-creative

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow step 7 says "If landing page URL is provided, check message match between ad and page," which implies the agent will fetch and interpret arbitrary external landing page content (untrusted third-party web pages) as part of its decision-making, creating a risk of indirect prompt injection.