icp-identification

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to research a provided company URL and "Using web search and the company URL, investigate" (Phase 1) and to use downstream strategies like "pain language" and "competitor audiences" that read social posts, job postings, and public engagement signals—all public/untrusted third‑party content that the agent must interpret and that can materially change ICP definition and subsequent actions.