marketing-plan

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In the required INIT phase, the skill reads all files in the plan’s materials/ directory and pulls live data via wired MCP/API integrations (e.g., Ahrefs/GA4/Stripe/App Store Connect/Customer.io/Shopify/GitHub/Notion), meaning outsider-authored free text can enter through client-provided artifacts and be ingested without selecting a specific item.