signals-scout-web-vitals

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow uses analytics database queries (execute-sql on events) to read PostHog telemetry ($web_vitals), which contains attacker-controllable telemetry values such as host and pathname that flow into the agent's context and tool outputs.