sponsored-newsletter-finder

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's Phase 1 "Discovery via Web Search" explicitly instructs the agent to use the web_search tool to find and read public third‑party pages (e.g., substack.com, beehiiv.com, newsletter.directory, paved.com) and then score and act on that content to select sponsors, so untrusted web content can directly influence decisions and actions.