blink-seo-articles

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill's required Step 1 "Keyword Research" explicitly instructs using web_search/google_serp and to fetch top competitor URLs (e.g., examples include site:reddit.com and fetch_url(url: "https://competitor.com/their-article")), meaning the agent ingests untrusted public web and user-generated content and uses that content to shape writing and publishing decisions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly calls fetch_url at runtime to retrieve competitor pages (e.g., fetch_url(url: "https://competitor.com/their-article")) and instructs the agent to scan that fetched content and "Write to fill those gaps," meaning externally fetched text is ingested during runtime and directly controls the agent's output.