geo-metrics-tracker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required workflow explicitly instructs ingesting and processing content from open third-party sources—e.g., "Map data sources & collection methods" in SKILL.md (which lists manual sampling, third-party GEO monitoring tools/APIs and querying AI platforms) and the sampling pseudocode in references/metrics-templates.md (fetch_answers_from_platform, raw_answer, extract_links)—and uses those untrusted outputs to compute metrics and drive alerts/dashboards, so third-party content can materially influence agent behavior.