anysite-lead-generation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill's SKILL.md explicitly instructs the agent to fetch and parse untrusted public third‑party content (e.g., via mcp__anysite__search_linkedin_users, mcp__anysite__get_linkedin_company, mcp__anysite__parse_webpage and mcp__anysite__get_sitemap to scrape LinkedIn, company websites, Instagram and sitemaps) and to act on that data to find emails, enrich profiles, and drive outreach, so third‑party content can materially influence tool use and next actions.