marketing-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Research Mode (SKILL.md § "PR Research") explicitly instructs the agent to use agent-browser to open and ingest public webpages (e.g., news.google.com, connectively.us (HARO), linkedin.com search, ahrefs.com) with "agent-browser get text body" and to extract coverage and journalist queries, which are untrusted third‑party/user‑generated sources that the agent will read and use to drive pitching and follow-up actions.