find-dentists

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the agent to run Scrapegraph/Tavily/Exa/Fiber/Hunter/Tomba calls to scrape public websites, directories, job boards, and LinkedIn profiles (e.g., /v1/searchscraper and /v1/smartscraper) and to read and act on that scraped content to identify decision makers, hiring signals, and competing products, which are untrusted third‑party sources that can influence tool actions and prioritization.