seo-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill performs a "full-site SEO audit" and explicitly instructs the agent to "Detect business type from homepage signals" and run sub-agents that analyze sitemap, schema, content, images, etc., which requires fetching and interpreting public website pages (untrusted third-party content) as part of its workflow.