audit-urls

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow calls seo_run_report with a user-supplied explicit URL list and then consumes structuredContent (including issue summaries/evidence), which implies runtime ingestion of fetched page content from outsider-authored web pages into the agent’s LLM context.