seo-entity-linking

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The skill’s runtime workflow operates on the PageSnapshot’s rendered_dom/raw_html (JSON-LD sameAs/@id/mainEntity), which is outsider-authored page content the operating user did not author, so any free text/URLs present in that page can be ingested into the agent’s LLM context for auditing/fixing.