laniameda-instagram-reel-digest

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly fetches transcripts/metadata from public Instagram reel URLs via Supadata and, if that fails, directly opens the reel page to read captions and on-screen text (Step 1–2), which are untrusted, user-generated third-party contents that the agent ingests and uses to extract workflows/prompts and to decide actions like saving to the KB or drafting SKILL.md files.