outreach-backlink-pr-campaign

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s workflow ingests outsider-authored free text at runtime via the “Build the target list” step, which uses outreach-press-list-* sources containing “Recent articles on relevant topics (personalise the pitch)”—i.e., it reads and incorporates journalists’/public web article text into the agent’s LLM context.