21-audit-ads-performance

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md’s required runtime workflow reads outsider-provided advertising/account data (e.g., via “Paste data tu Ads Manager” and/or connected MCP Meta endpoint https://mcp.facebook.com/ads) before producing the Health Score/action plan, so attacker-authored text can enter the workflow through user submission or account-linked records.