competitor-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The workflow explicitly instructs the agent to fetch and scrape public third‑party websites (e.g., SKILL.md Step 3: orth api run scrapegraph /v1/smartscraper targeting "https://notion.so/pricing", and Step 2 using Exa with external URLs), so untrusted web content is ingested and can influence subsequent actions.