sales-openwebninja

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly instructs the agent to call and parse public third‑party sources (e.g., Website Contacts Scraper, Email Search, Real‑Time Web Search/SERP, Web Unblocker, Local Business Data and JSearch) as part of its required workflow (see SKILL.md Step 4 and references/platform‑guide.md), meaning untrusted web/forum/social content is fetched and used to drive follow‑on actions such as outreach, enrichment, or automation—creating a clear avenue for indirect prompt injection.