magicstarfishboost-seo-content-marketing-skill-suite
Warn
Audited by Snyk on May 18, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and analyzes arbitrary public URLs (e.g., /content-audit, /technical-seo, /page-speed-seo, /competitor-gap, /link-prospecting and the /workflows:ai-content-pipeline) and ingests untrusted, user-generated/open web content as part of its required workflows to drive decisions and automated actions, which could allow indirect prompt injection from third-party pages.
Issues (1)
W011
MEDIUMThird-party content exposure detected (indirect prompt injection risk).
Audit Metadata