seo-cluster

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md workflow explicitly instructs the agent to fetch SERPs via "WebFetch/Playwright (top 10 results)" and to fetch related-keyword SERPs, meaning it ingests open/public third-party web content (search results and linked pages) which the agent reads and uses to decide clusters and next actions, so untrusted content could inject instructions.