google-ads-keywords

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md "Step 2 — Expansion Sources" explicitly instructs using public, user-generated and open-web sources (e.g., Reddit/Quora, Google Autocomplete/People also ask/Related Searches, competitor tools like SpyFu/SEMrush/Ahrefs) as part of the keyword research workflow, so the agent would ingest and act on untrusted third‑party content.