paw-mkt-referral

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md Response Protocol and On Activation steps explicitly instruct the agent to accept a "live URL" / "live site" as starting context and to "read strategic context" from that live site, meaning the agent will fetch and interpret open/public third‑party web content that can materially influence its recommendations and actions.