course-certification-pipeline

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly automates browsing and scraping of public course pages and quizzes on a third-party platform (e.g., https://anthropic.skilljar.com/ and verify.skilljar.com), reads quiz questions and course content to choose answers, and downloads certificate pages and LinkedIn profile pages to drive subsequent actions, so untrusted third-party content directly influences decisions and tool use.