ad-brief

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow ingests outsider-authored free text from Meta ads’ “Body Text” and related hook/title fields stored in Airtable/Supabase (Step 1d/1e -> Airtable Body Text and Step 2 uses exact quotes), which can include adversarial instructions even if the skill treats it as untrusted.