marketing-cro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md defines CRO guidance but its runtime workflow only consumes the user’s provided prompt text (e.g., including any shared URL) rather than ingesting outsider-authored free text from an external monitored feed/inbox/ticket/queue or from arbitrary web pages without a specific fetch step.