competitive-intelligence-radar

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is an unknown personal GitHub repository explicitly recommended for installation — installing code from an unvetted personal repo can be used to distribute malicious plugins or binaries, so it should be treated as suspicious until audited.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). During the /radar weekly gather, the competitor-scout subagent fetches and LLM-ingests scraped competitor SERP/pricing/news pages via BrightData to produce the cited JSON dossier, so outsider-authored text is ingested as part of required runtime.