find-leads

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill explicitly instructs the agent to WebSearch and WebFetch arbitrary .de company websites and to read their public pages (e.g., /kontakt, /impressum, /team) to extract emails, Impressum addresses, and justification text that directly determine whether to add leads to the CRM (see "STEP 1 — Search for Leads" and "STEP 2 — Validate Each Lead" in SKILL.md), so untrusted third‑party content can materially influence decisions and actions.