yc-batch-evaluator

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly scrapes open/public sources — the YC batch directory and individual YC company pages via scrapegraph (Step 1 & 3a), scrapes each company’s public website (Step 3b), and ingests Perplexity/Apollo outputs (Step 3c/3d) as required inputs that directly drive assessments, sheet updates, and ranking, so untrusted third-party content can materially influence agent behavior.