seo-maker

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). assets/dashboard-template.html 렌더 단계에서 results.json의 필드(예: findings[].finding, recommendation 등)를 자바스크립트로 직접 HTML에 삽입해(즉 results.json에 들어간 텍스트를 LLM이 아니라 런타임 JS가 소비) 외부에서 유입된 poison 텍스트가 대시보드에 그대로 반영될 수 있습니다.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The dashboard template loads and executes remote JavaScript from https://cdn.jsdelivr.net/npm/chart.js at runtime (client-side) to render charts, which is a required external script the skill relies on and therefore executes remote code.