seo-crawl-render

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime path for URL acquisition uses WebFetch to fetch arbitrary outsider-authored web pages (including raw_html, plus fetched robots.txt, sitemaps, and /llms.txt), which are readable text ingested into the produced PageSnapshot and then into downstream LLM context—classic public-web free-text injection surface.