competitor-teardown

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow runs web-research/extraction/screenshot agents (e.g., tavily/search-assistant, exa/search, tavily/extract, and infsh/agent-browser) that ingest free text scraped from attacker-influenced public pages/search/review sites selected by the user at run time (e.g., via queries/URLs like https://competitor.com or “G2/Capterra/Reddit” searches).