lookalike-customer-finder-skill

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md workflow explicitly instructs the agent to "search market for matching companies" and to enrich results using public third‑party sources (see "Enrichment Data Sources" listing Crunchbase, LinkedIn, BuiltWith, ZoomInfo, PitchBook, etc.), meaning the agent is expected to fetch and interpret untrusted, user‑generated or public web content that can materially influence scoring, contact intelligence, and outreach decisions.