marketing-social

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Research Mode explicitly instructs the agent to use agent-browser to open and scrape public social pages (e.g., the SKILL.md agent-browser commands for "https://www.instagram.com/{competitor-handle}/", "https://www.tiktok.com/@{competitor-handle}", "https://www.linkedin.com/company/{competitor-linkedin}/", and TikTok Explore) and to read the page text/body for competitor data, exposing it to untrusted, user-generated third‑party content that will be interpreted and used to drive strategy and actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's Research Mode includes a runtime installation and use of agent-browser via "npx skills add https://github.com/vercel-labs/agent-browser" which fetches and would execute remote code from that GitHub URL as a required dependency for browser-based research.