marketing-community

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's workflow explicitly requires reading a "live community URL" as part of the Starting Context Router / Response Protocol (SKILL.md § Starting Context Router and § Response Protocol step 1), which means the agent will ingest and act on public, user-generated community pages and their content when grounding recommendations.