competitor_intelligence

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's SKILL.md explicitly requires fetching and scraping public competitor websites and RSS feeds (e.g., "Analyze SEO strategy for [competitor URL]", "Gather Competitor Data", and "Aşama 1: Data Sources: ... basın sitesi RSS'lerini belirle" / "Automation Setup: Python tabanlı web scraping"), and instructs the agent to read and act on that third-party content to produce strategy and action items, which meets all criteria for exposure to untrusted third‑party content.