marketing-content

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md "Research Mode: Content Intelligence" explicitly instructs the agent to use agent-browser to open and scrape public sites (e.g., Google search results, AnswerThePublic, competitor blogs, Reddit, Quora) and "get text body" for extraction and analysis, so untrusted, user-generated third‑party content is ingested and used to drive decisions and next actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill includes a runtime install/use of the agent-browser tool via the command "npx skills add https://github.com/vercel-labs/agent-browser --skill agent-browser", which fetches and executes remote code from https://github.com/vercel-labs/agent-browser and is a required dependency for the skill's browser-based research flows.