marketing-guerrilla

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's Research Mode explicitly directs the agent to use agent-browser to open and scrape public sites (e.g., Google Trends, YouTube, Reddit, TikTok, Product Hunt) and "get text body" to extract trends and community signals, which are untrusted, user-generated third-party sources that the agent is expected to read and use to drive campaign design and next actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's Research Mode uses agent-browser to fetch and ingest external pages at runtime (e.g., https://trends.google.com/trends/explore?q={category-keyword}&gprop=youtube, https://www.reddit.com/search/?q={category-keyword}, https://www.youtube.com/results?search_query={category}+viral, https://ads.tiktok.com/business/creativecenter/inspiration/topads/pc/en, https://www.producthunt.com/topics/{category}), meaning remote content is retrieved during execution and injected into the agent's context which can directly influence prompts and recommendations.