competitor-teardown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The skill’s runtime workflow explicitly “Capture the page” by fetching a user-supplied competitor URL and then “Extract value proposition / Map messaging hierarchy” from the fetched landing page text, which is outsider-authored free-form web content ingested into the agent’s LLM context.