local-seo-audit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md explicitly instructs the auditor to search and catalog public, user-generated listings on Google Maps and other third-party sites (see "Duplicate & Related Listings Workflow" and "Citation & NAP Consistency Audit" which reference Google Maps, Yelp, Facebook, Apple Maps, Bing, etc.), requiring the agent to read and act on untrusted third-party content that can change decisions like merging or deleting listings.