lgs-search

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly describes querying and scraping public store websites (The Gathering Place, Atomic Empire) and online marketplaces (TCGPlayer Mass Entry, Mana Pool /add-deck) via Playwright during the LGS sweep, online optimize, and handoff phases, and uses those live page results to drive allocation and cart-add actions, so untrusted third-party page content can materially influence the agent's decisions and actions.