audience-icp-filter

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/build.py the skill’s pass 1 runtime ingests user-provided JSON lead fields (e.g., jobTitle, companyName, proEmail, shortBio) from spec.json or stdin and classifies them, so outsider-authored free text can flow into the LLM/semantic pass as part of the “leads” records.