content-marketing

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The workflow explicitly requires documenting "evidence of demand" by checking Google autocomplete, competitor pages ranking and SERP scans (see SKILL.md step 3 and references/WORKFLOW.md), which means the agent is expected to read and act on untrusted public web pages/third‑party search results that could contain malicious or instructive content.