seo-images

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md describes only first-party workflow instructions for analyzing an input HTML/page (e.g., checking <img> markup) and optionally fetching Google Images SERP results via a tool, but it does not specify any runtime path where outsider-authored free text is ingested from an attacker-controlled queue/feed without first selecting specific items.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly recommends installing system packages using sudo (e.g., "sudo apt install ..."), which encourages obtaining elevated privileges and modifying the host system state.