competitor-profiling

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.95). The required workflow uses UnifAPI to fetch and render public web pages and social content (e.g., browser/markdown for competitor homepage/pricing and x/*, linkedin/*, reddit/posts/*/comments, news/search), which are outsider-authored free text that the agent ingests into the LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly invokes the UnifAPI MCP (e.g. https://mcp.unifapi.com) at runtime to fetch rendered pages and SEO/backlink/social data which are injected into the agent's context and therefore directly control the agent's prompts/output.