sales-ai-visibility

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to WebFetch and read other skills' SKILL.md from the public GitHub raw URL (https://raw.githubusercontent.com/sales-skills/sales/main/skills/{skill-name}/SKILL.md), which requires ingesting public third‑party content and using it to ground recommendations and tool routing.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to WebFetch other skills' SKILL.md from raw.githubusercontent.com at runtime (e.g. https://raw.githubusercontent.com/sales-skills/sales/main/skills/{skill-name}/SKILL.md — e.g. https://raw.githubusercontent.com/sales-skills/sales/main/skills/sales-mailshake/SKILL.md), and that fetched content is read and used to ground recommendations and craft prompts, so it can directly control agent instructions.