app-store-screens

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow explicitly allows fetching an apps.apple.com listing at runtime via Pika MCP (fetch_appstore_screens), which ingests App Store listing text such as metadata.description into the agent’s context while drafting the inferred brand spec.