marketing-prospecting

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). This is a personal GitHub repository URL (a .git remote for an unverified/individual account) which is not an official vendor/source and could host unreviewed code or installer scripts, so treat it as potentially unsafe until its contents are inspected and provenance verified.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Demand-signal branch reads outsider-authored free text at runtime by mining public discourse (forums/reviews/GitHub issues/job posts/social) and then using social-fetch/scraping/Firecrawl/Browserbase to load the original pages for evidence.