competitor-analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly requires ingesting and interpreting public, user-generated content (e.g., "Search-Based Discovery" and "Manual Discovery" steps: Xiaohongshu explore page, hashtag searches, Google search, review the last 50 posts and comment sections) and uses those findings to drive decisions and actions, exposing the agent to untrusted third‑party content.