local-business-rebuild

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill reads original-site/content-inventory.json and original-site/assets/ from the prospect’s scraped content at runtime, and that scraped content is outsider-authored free text (public web pages scraped by /prospect-scrape) that can be ingested into the LLM context to drive copy/design decisions.