ads-info-gatherer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow (steps 2–3 under "online-gather") explicitly instructs the agent to fetch and inspect dealer site pages and other live source URLs, saving screenshots and extracting disclaimers and campaign rules from those public third-party sites, which the agent will read and use to drive downstream decisions.