seo-ecommerce

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is accepted as user-supplied url in /seo ecommerce <url> which is then fetched and parsed at runtime (scripts/fetch_page.py → scripts/parse_html.py), exposing the agent to whatever text the outsider hosts on that page.