scrapebox-ultimate-seo-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow can fetch and ingest public web content (e.g., via ScrapeBox “URL scraping/content harvesting” and search-engine harvesting) into the agent context as readable scraped text/outputs, which is outsider-authored free text from arbitrary third-party sites.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.80). The skill explicitly instructs running an installer with administrator privileges, creating a scheduled task that runs as SYSTEM/RunLevel Highest, and editing files in Program Files/installation directories — all actions that require elevated rights and modify the host system state.