find-people-having-simple-signals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly ingests public social media content (LinkedIn) — e.g., the "Competitor Engagement Signal" and "Competitor Activity Signal" accept LinkedIn profile URLs and the workflow returns people matched by the deployed signal via POST /api/v1/signal/{signal_id}, so untrusted, user-generated third‑party content is read and used to drive follow-up actions.