prospecting

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). SKILL.md requires pulling candidate evidence from public sources (e.g., LinkedIn/Google Maps/business websites) and using tools like Firecrawl/Browserbase to extract prospect-site content into LLM-readable markdown, which is outside-authored free text that could contain prompt-injection payloads.