paw-mkt-sostac

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The workflow executes automated web research via agent-browser (or WebFetch/WebSearch) against arbitrary URLs such as search results, competitor sites, Reddit, Quora, and review platforms, ingesting outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill contains instructions to install agent-browser and Playwright via npm install -g agent-browser && npx playwright install chromium from an external package registry, which constitutes an unverifiable runtime external dependency from an unknown/weak publisher tier.