audience-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Phase 2b "Review Mining" explicitly requires ingesting user-supplied customer reviews (pasted, file path, or URL content the user must provide), which are untrusted user-generated third-party content that the agent is expected to read and use to drive downstream actions like /write-hooks and audience definitions.