Surfer SEO Content Optimizer

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly states the tool uses the DataForSEO SERP API to fetch search results and then fetches and scrapes each competing page with cheerio (public web pages), which the agent reads and uses to drive recommendations and scoring—exposing it to untrusted third-party content that could carry indirect prompt injection.