performance-check

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's Process steps 2–3 explicitly fetch live metrics from connected third-party analytics/MCP platforms (e.g., google-analytics, google-ads, meta-marketing, linkedin-marketing, tiktok-ads, shopify, etc.) and then reads and interprets that data to generate recommendations (step 9), which means untrusted/user-generated third-party content can directly influence agent actions.