onboarding-kickoff

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's pipeline explicitly scrapes public third-party sources (Google Maps and business websites via scripts/gmaps_lead_pipeline.py and the referenced scrape_website_contacts / Apify flows called from scripts/onboarding_post_kickoff.py), ingests that untrusted user-generated web content into enrichment and LLM-driven processing, and then uses those results to drive campaign creation and automated actions—fulfilling the conditions for indirect prompt injection risk.