audience-research

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). SKILL.md explicitly instructs the agent to read and mine user-generated content from public YouTube comments and competitors' comment threads and top search-result pages (e.g., "Read the last 50 comments across your 5 most-watched videos" and "Read the top 20 comments on your competitors' most popular videos"), which are untrusted third‑party sources whose contents are used to drive recommendations and next actions.