sales-infludata

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly describes ingesting and analyzing public, user-generated social media content (e.g., "Social Listening" brand mentions/UGC, "Co-Pilot AI" that "reads and categorizes comments", and examples that "searches the creator in influData and opens their profile") from Instagram, TikTok, YouTube, etc., which the agent is expected to read and use to drive recommendations and actions, exposing it to untrusted third-party content that could influence behavior.