page-cro

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly instructs the agent to analyze marketing pages and to be used "even if the user just shares a URL and asks for feedback" (SKILL.md), which requires fetching/reading public web pages — untrusted third-party content that the agent must interpret and that can materially influence its recommendations and next actions.