google-ads-audit-leadgen

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's required workflow (see "Layer 4 — Landing Page and Form Audit" and the checklist items like "Mobile page speed <3 seconds? (Run through PageSpeed Insights)" and checks for headline/form content) explicitly expects the agent to fetch and inspect public landing page URLs and use that content to drive audit recommendations, exposing it to untrusted third‑party page content that could influence decisions.