app-review-analyzer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The skill’s runtime workflow explicitly reads outsider-authored free text—app store user review bodies (and developer response text) from iOS App Store / Google Play pages via live browser interaction—then injects those review texts into the agent’s LLM context for categorization and reporting.