seo-cluster

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and parses live SERP data from the open web (e.g., "Step 1: Seed Keyword Expansion" and "Step 2: SERP Overlap Clustering" which call WebSearch or DataForSEO to retrieve top-10 organic results and extract "related searches" / PAA), and those arbitrary public webpage results are read and directly drive clustering and execution decisions (merge/cluster/interlink), exposing the agent to untrusted third‑party content that could carry indirect prompt injections.