juma-upsell-finder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). SKILL.md Process step 3 explicitly instructs the agent to review public competitor sources ("Review competitor ad libraries (Meta Ad Library, Google Ads Transparency Center)" and other visible competitor activity) and to use those observations to drive prioritization and pitch decisions, meaning the agent will ingest untrusted public web content that can materially influence actions.