competitive-intelligence-agent

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s workflow explicitly requires ingesting competitor signals such as “landing pages, content, ads, and SEO signals” from competitor-provided URLs at runtime, which would involve public web content authored by outsiders being read as free text by the agent’s LLM context.