competitor-discovery

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly runs web searches and "pull[s] companies listed on review/comparison sites (G2, Capterra)" and requires fetching candidate homepages and pricing pages (Steps 3–4), meaning it ingests untrusted public web content that the agent must read and that directly influences its competitor selection and actions.