Competitor Monitor

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs the agent to "research their current state" and to monitor public, untrusted third‑party sources such as competitor homepages, job postings, review sites (G2, Capterra, Trustpilot) and social signals, which the agent would read and interpret as part of its workflow.