instagram-campaign-scout

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow and actor-selection/tools explicitly run hosted collection actors (e.g., instagram-hashtags, instagram-posts, instagram-comment-scraper) via scripts like build_instagram_actor_input.mjs and runHostedCollection to collect public Instagram posts, comments, and tagged UGC which the skill then normalizes, reads, and uses to rank creators and build watchlists, so untrusted third‑party content can materially influence agent decisions.