seo-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The SKILL.md explicitly instructs the agent to fetch the homepage via scripts/fetch_page.py and crawl up to 500 pages of a target website (Process steps 1 and 3), meaning it ingests arbitrary public web content which it analyzes to detect business type and to decide/delegate subagents and recommendations—allowing untrusted third-party content to influence behavior.