page-cro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's included script scripts/conversion_audit.py explicitly fetches arbitrary webpages using urllib.request.urlopen(args.url) and SKILL.md instructs the agent to analyze marketing pages (e.g., user-provided URLs), so the agent will read and act on untrusted third-party web content that could carry indirect prompt-injection instructions.